Privacy Policy

1. What we collect

Account data: your username, email address, and a securely hashed password. We never store passwords in plain text.

Billing data: subscriptions are processed by Stripe. Your card number never touches our servers — we only receive a customer reference and subscription status from Stripe.

Usage data: standard server logs (IP address, timestamps, requested pages) used for security, rate limiting, and debugging. Our signup form uses Cloudflare Turnstile to block bots, which processes limited technical data under Cloudflare's privacy policy.

2. What we use it for

To operate your account, deliver signals and alerts, process subscription payments, respond to support requests, send password reset emails, and keep the service secure. We do not sell your personal data, and we do not send marketing email you haven't asked for.

3. Who we share it with

Only the processors needed to run the service: Stripe (payments), Cloudflare (hosting, DNS, bot protection, email routing), and Resend (transactional email such as password resets). Each processes your data under their own privacy terms. We share data with authorities only when legally required.

4. Retention and deletion

Account data is kept while your account exists. You can request deletion of your account and personal data at any time by emailing [email protected] — we will remove your personal data within 30 days, except records we must keep for legal or accounting reasons (e.g., invoices).

5. Cookies and local storage

We do not use analytics, advertising or tracking cookies, and we do not load any third-party scripts on our pages. Because everything we store is strictly necessary to run the service, no cookie consent banner is required under EU ePrivacy rules; the notice you see on first visit is informational.

What is actually stored in your browser: (1) local storage entries for your login session, your onboarding state and interface preferences, set by us; (2) a short-lived security cookie (__cf_bm) set by Cloudflare, which protects the site from bots; (3) on the signup page only, Cloudflare Turnstile may set a cookie to verify you are human; (4) when you go to checkout or the billing portal, Stripe sets its own cookies on Stripe's pages for fraud prevention. You can clear all of these from your browser at any time; clearing them signs you out.

6. Your rights

Depending on where you live (e.g., GDPR in the EU), you may have rights to access, correct, export, or delete your personal data, and to object to processing. Email [email protected] and we will honor these requests.

7. Changes and contact

We may update this policy as the service evolves; material changes will be announced on the site. Questions: [email protected].