1. Information we collect
When you register, we collect your email address, a salted password hash, acceptance time for our legal terms, and technical account timestamps. We do not store your plaintext password. When you use the service, security records may include session identifiers, rate-limit keys derived from network information, request metadata, and expiration times.
2. How we use information
We use information to create and authenticate accounts, maintain sessions, prevent abuse, secure the service, troubleshoot problems, comply with law, and communicate about the account service when appropriate.
3. Legal bases and consent
Depending on where you live, processing may rely on performance of a contract, legitimate interests in operating and securing the service, legal obligations, or consent. You may stop using the service at any time.
4. Cookies
We use a strictly necessary, HTTP-only session cookie to keep you signed in. It is marked Secure on HTTPS connections and uses SameSite restrictions. We do not use browser local storage for passwords or authentication tokens.
5. Sharing and service providers
We may use infrastructure providers, including Cloudflare, to host and protect the service. They process information under their own contractual and legal obligations. We do not sell personal information. We may disclose information when required by law or necessary to protect rights, safety, and service integrity.
6. Retention and security
We retain account information while the account is active and as needed for security, legal, and operational purposes. Sessions expire automatically. We use password hashing, access controls, secure cookies, request validation, and rate limits, but no system can guarantee absolute security.
7. Your choices and rights
Subject to local law, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to lodge a complaint with a regulator. Identity verification may be required before a request is completed.
8. International use and changes
Information may be processed where our providers operate, with protections required by applicable law. We may revise this Policy and will post the updated date. Contact details for privacy requests will be provided by the service operator.