1. Information We Collect

We collect information that you provide directly to us, including:

Email address (for authentication)
Name (optional)
Session data (for maintaining your login state)
Device UUID (for security purposes)
IP address and user agent (for security logging)

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Authenticate your account and maintain your session
Send you magic links for passwordless authentication
Protect against unauthorized access and abuse
Communicate with you about the Service

3. Cookies and Similar Technologies

We use essential cookies for authentication purposes. These cookies are necessary for the Service to function and cannot be disabled. We use session cookies, CSRF tokens, and LocalStorage for device UUID security tracking.

4. Data Retention

We retain your personal data only for as long as necessary to provide the Service. Magic links expire after 15 minutes. Sessions expire after 12 hours of inactivity.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to access your personal data, delete your account and associated data, and receive a copy of your data in a machine-readable format.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including password hashing, one-time use magic links, secure session cookies, and rate limiting on authentication endpoints.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the "Last updated" date at the top of this page.

8. Contact Us

If you have questions about this Privacy Policy, contact us through the service administrator email.