Privacy Policy
Last updated April 2026.
Data we collect
Account data (name, email, optional phone), authentication metadata (last login timestamp, IP address, user agent), and any content you upload (avatar).
Purpose of processing
Account management, authentication, security monitoring, and (with your explicit opt-in) product communications.
Retention
Account data is kept for the duration of the account, plus a short retention period after deletion for legal and forensic purposes.
Your rights
Under GDPR / applicable laws you can request access, rectification, deletion, or portability of your personal data via the contact form.
Staff access to security metadata
A small number of staff members holding the elevated `users:read-pii` permission can consult your last sign-in IP address and user-agent for security investigations (account compromise, abuse reports, suspicious activity). Access is on a need-to-know basis and is logged. The data is retained only as long as the account is active, plus a short post-deletion window for legal and forensic purposes.
Cookies
We use first-party cookies for session, language and color-mode preferences. No third-party tracking cookies.
Contact
For any privacy question or to exercise your rights, please use the contact form on the public site.