What we collect, and nothing more.

› 02

1. What we collect

Account data.When you create an account we store the email address you choose, a hashed password, and the session record that authenticates you. Authentication is run by the open-source auth library we use, on our own database — there is no third-party identity provider in the loop.

Billing data. Payments go to Stripe. Stripe stores your card details on their side and gives us a customer record with the last four digits and the billing email. We never see, store, or transmit full card numbers.

Server logs. Every request to the site is logged for a short window for security and abuse response. The logs include IP, user agent, and the URL hit; they are not sold, shared, or used to build a profile of you.

Contact-form submissions. When you write us through the contact form, we receive the message and the email you provide so we can reply. Submissions are routed into our support inbox; nothing is added to a marketing list.

2. How we use it

Account and billing data are used to run the service: log you in, give access to the tier you paid for, and email receipts and renewal reminders. Server logs are used for security and to investigate abusive traffic. Contact-form submissions are used to reply to you and to keep a record of what we said back.

Nothing is sold, nothing is rented, nothing is shared with broker partners or affiliate networks. There is no third party in our revenue model, so there is no third party in our data pipeline either.

3. Cookies and pixels

The site sets exactly two classes of cookie: a session cookie used by the auth library to keep you logged in, and a CSRF-protection cookie shared with Stripe’s billing portal when you open it. There are no advertising cookies, no Facebook or TikTok pixels, no Google Analytics, no Hotjar, and no retargeting tag of any kind. If a tracker is added later this page is updated first.

4. Stripe’s privacy practices

Payment processing is handled by Stripe under their privacy policy. We do not see your card number, expiry, or CVC; we only see the Stripe customer record (email, last four, billing address you provided) needed to reconcile a subscription and to issue a refund if one is owed.

5. Retention

Account and billing records are kept for as long as your account is active and for the window required by tax and accounting law afterward. Contact-form submissions are kept in our support inbox until you ask us to delete them, or for the same accounting window if the message is about a paying engagement. Server logs are rotated on a short window and are not exported to long-term storage.

6. Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and associated records. Write to lotlore-2@polsia.app; we reply within two business days and complete export or deletion within thirty days. Deleting your account terminates any active subscription at the end of the period you have paid for.

7. Changes to this policy

Material changes are announced by email at least fourteen days before they take effect and the “Last updated” date below is updated the same day. Editorial fixes for typos or clarity do not count as material changes.

Last updated: 2026-08-14