Privacy Policy

Last updated 2026-10-23

What we store

• Account: name, email address, a hashed password, and sign-in sessions (IP address and browser).
• API keys: only a one-way hash of each key plus its first characters; the full key is shown once and never stored.
• Usage: per-key usage counts for quota enforcement. Statement files are processed in memory and purged as soon as the export is generated. We never store card numbers or account numbers.
• Waitlist: email, the description you chose, optional note, optional answer about pricing, and the link you arrived from.
• Purchases: for pre-orders and subscriptions, the order reference, product and amount that our payment provider sends us.
• Email log: a record of transactional emails we sent you (recipient, subject, time).

What we do not store

Card details. Payments are handled entirely by Polar; we only receive your subscription status and an order reference.

Who processes data for us

• Polar (merchant of record): checkout, payments, invoices, tax.
• Resend: delivery of transactional emails.
• Our hosting provider: servers and database in the EU (Hetzner).
• Umami (self-hosted, if enabled): cookieless, aggregate page analytics.

Cookies

A session cookie keeps you signed in. A first-party cookie remembers which link brought you here (for example a community post) for 90 days. No advertising cookies.

Retention and your rights

We keep account data while your account exists and delete it within 30 days of a deletion request. You can ask for a copy of your data, a correction, or deletion by replying to any email from us.