Privacy policy

Template notice: Review this policy with a privacy professional before launch and update it for your real hosting, analytics, payment and email providers.

Data stored

The starter account system stores email address, display name, password hash, plan, usage counters, API-token hashes, IP addresses for security logs and subscription requests.

Media files

The current desktop workflow processes source media locally. The starter website does not include a media-upload endpoint.

Cookies

The website uses an essential secure session cookie for authentication and a local-storage value for the selected visual theme.

Passwords and tokens

Passwords are stored using PHP password hashing. API tokens are stored only as SHA-256 hashes and cannot be recovered after creation.

Your rights

Users may request access, correction or deletion through the support email shown in the footer, subject to applicable law and required accounting records.