Privacy Policy

Last updated: April 3, 2026

Information We Collect

When you register, we collect your email address, display name, and password (stored as a bcrypt hash — we never store plain-text passwords). When you use the Service, we store your session data, drawings, trade journals, and preferences.

How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Send account-related emails (activation, password reset)
• Process subscription payments via Stripe
• Improve the Service based on usage patterns

Payment Processing

Payments are processed by Stripe, Inc. We do not store your credit card information. Stripe's privacy policy applies to payment data. We only store your Stripe customer ID for subscription management.

Data Storage and Security

Your data is stored on servers located in Europe (Hetzner, Germany). We use HTTPS encryption for all data in transit, bcrypt for password hashing, and PostgreSQL with access controls for data at rest. We implement reasonable security measures but cannot guarantee absolute security.

Cookies and Local Storage

We use browser local storage to maintain your login session (JWT token) and user preferences. We do not use third-party tracking cookies. No advertising cookies are used.

Third-Party Services

We use the following third-party services:

• Stripe — Payment processing
• Resend — Transactional emails (activation, password reset)
• Cloudflare — DNS, CDN, and DDoS protection
• Hetzner — Server hosting (Germany)

Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymized usage statistics may be retained indefinitely.

Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing of your data

To exercise these rights, contact us at [email protected].

Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from minors.

Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email.

Contact

For privacy-related questions, contact us at [email protected].