Privacy Policy

1. What We Collect

• Email address — required to register, and the only way to reset a password or reach you about a payment.
• Password — stored only as a one-way hash. We cannot read it, and neither can anyone who steals the database.
• Account activity — your points balance, purchases, subscription term and archive requests.
• Technical data — IP address, browser and approximate region, kept in server logs and used for security and rate limiting.
• Payment records — amount, currency, time and the transaction hash of a crypto payment.

We do not ask for your real name, address or phone number, and we have no reason to want them.

2. What We Never See

Payments are handled by an external processor. Card numbers, wallet credentials and banking details go to them, never to us — we only receive confirmation that a payment succeeded and its amount. We do not hold your card details because we never receive them.

3. Cloudflare And Bot Protection

The site sits behind Cloudflare, and registration, login and password reset are protected by the Cloudflare captcha. To tell a person from a bot, Cloudflare processes your IP address, browser details and interaction signals, and sets a short-lived cookie for the check. This is a security measure, not advertising: the captcha does not profile you and is not used to track you across other sites. Cloudflare acts as our processor and handles this data under its own privacy terms.

4. Cookies

We use only what the site needs to work:

• Session cookie — keeps you logged in.
• CSRF token — stops other sites submitting forms as you.
• Theme preference — remembers light or dark; stored in your browser, never sent to us.
• Cloudflare cookie — records that you passed the bot check.

There are no advertising or cross-site tracking cookies, and we do not sell or share your data with advertisers.

5. Why We Are Allowed To Hold It

• To provide the account and the features you paid for — we cannot run an account without an email and a password.
• To take payments and resolve payment problems.
• To keep the site secure — blocking bots, abuse and fraud is a legitimate interest.
• To meet legal obligations, such as keeping payment records.

6. How Long We Keep It

• Account data — while the account exists, and deleted when you delete it.
• Server logs — around 30 days, then overwritten.
• Payment records — kept longer where accounting or tax rules require it, even after an account is deleted.
• Takedown requests — kept as a record of what was removed and why.

7. Your Rights

Write to us at any time to get a copy of your data, correct it, or have the account deleted. We answer within 30 days. Deleting an account removes the email address and activity history; it does not refund unused points or subscription time, and it does not erase payment records we are required to keep.

8. Security

Traffic is encrypted over HTTPS, passwords are hashed, and access to the database is limited to what runs the site. No system is perfect: if a breach ever affects your data, we will say so plainly and tell you what was exposed.

9. Changes And Contact

The date at the top shows the current version, and material changes will be announced on the site. Questions, data requests or complaints go to Contacts. See also our Terms Of Service.