Privacy Policy

Last updated: May 2025

1. Data We Collect

We collect your email address and password (hashed) when you register. If you subscribe to Pro, Stripe processes payment information on our behalf — we do not store card details. If you link your Telegram account, we store your Telegram Chat ID to manage Pro channel access.

2. Authentication Tokens

We use JWT access tokens (15-minute lifetime) and httpOnly secure refresh tokens (14-day sliding window) for authentication. These are stored in memory and httpOnly cookies respectively and are not accessible to third-party scripts.

3. Analytics

We use a self-hosted privacy-first analytics tool (Umami) to count page views and conversion events. No personally identifiable information is sent. No Google Analytics or Meta Pixel is used.

4. Local Storage and Cookies

We use browser local storage for session preferences. The refresh token is stored as an httpOnly secure cookie. We do not use third-party advertising cookies.

5. Data Sharing

We do not sell your data. We share data only with Stripe (payments) and Telegram (Pro channel access). Error reporting may be handled by Sentry with PII disabled.

6. Your Rights

You may request deletion of your account and associated data by contacting us. Upon deletion, your email, Telegram Chat ID, and subscription data are removed.