Privacy policy

Data responsibility

The operating instance management administers data processing. The operator legal identity, independent contact and registration country are not yet approved and must be completed before financial launch. The currently available privacy-request channel is a help-center ticket.

Stored data

Data includes email, account creation, site-password hashes, sessions, temporary verification codes, simulation records, tickets, chats, attachments, notifications, mail preferences, roles and audit logs. Future financial records remain separate if authorized activation occurs. The site does not request private keys or recovery phrases.

Purposes

Data supports email verification, account access, support, complaint follow-up, duplicate and abuse prevention, and action records. Rewarded advertising and offerwall data sharing are not activated in this phase.

Cookies

Cookies support sessions, CSRF protection, language and OTP. No external marketing trackers are added. Disabling session cookies can prevent sign-in or forms; public pages remain available without an account.

Processors and communication

Sign-in and recovery messages use the operator Gmail sender, and public access passes through Tailscale Funnel. Support email notices are opt-in. Future task providers require prior disclosure of provider identity, data, countries and terms before user data is sent.

Access and protection

Attachments are restricted to the ticket owner and authorized support staff and downloaded privately. Permissions are enforced server-side. Backups are encrypted for the Windows account; this is not an absolute security guarantee or an external audit.

Retention and requests

Account, support, audit records and backups remain with the instance operator; this release does not automatically delete accounts. Access, correction or deletion can be requested through support, subject to identity checks and record/backup review. A specific retention schedule must be approved before financial operation.