Privacy policy

How the website and apps process and protect personal data
    Data use   Email addresses, passkey public keys and identifiers, session and device details, and notifications are processed for account functions and security. Private passkey keys and biometric data are not collected. Data is encrypted before storage 
 Storage on device Settings and sessions are stored in encrypted HTTP cookies; other data is stored locally as listed below
   _l   Connection
 Encrypted HTTP cookies with tamper protection · until the session ends 
 
   _s   Settings · Sessions
 Encrypted HTTP cookies with tamper protection · up to 1 year 
 
   c:*   List positions
 Session storage · until the tab closes 
 
   p   Internal page cache
 Session storage · until the tab closes 
 
   p:*   Public page cache
 Cache storage · pages up to 14 days; assets until updated 
 
   s:*   Settings
 Local storage · until synchronized 
 
   tg   Telegram Mini Apps
 Session storage · until the tab closes 
 
   Public content   Published materials and comments are public 
   Third-party services         Cloudflare   Turnstile⁠           Protects the website from bots. Cloudflare processes IP addresses, TLS fingerprints, User-Agent headers, site keys and associated origins to detect and block bots and improve Turnstile. Signals are not used to identify, profile or target individuals
  Turnstile Privacy Addendum   
    MongoDB   Atlas⁠           Used to store data. Data is encrypted before storage
 
      SMTP2GO⁠           Delivers account emails and processes recipient addresses, message contents and delivery information
 
      Vultr⁠           Hosts the application servers, where requests and the data needed for operation are processed
 
 
   Native app security   Apple App Attest and Google Play Integrity process technical signals to verify app and device integrity on supported platforms 
    Telegram Mini   Apps⁠           Telegram is recorded as the session platform when opened there. Telegram processes data under its own privacy policy 
   Processing by providers   Providers may process data in other countries under their privacy terms. Data is shared as needed for operation and security 
   Data management and deletion   Account settings allow email changes, data export and deletion. Deleted accounts can be restored for five days; account records are then scheduled for deletion 
   Content after account deletion   After account deletion, personal data and publications are deleted. Only anonymized aggregate statistics may be retained indefinitely 
   Data rights   Applicable law may provide rights to access, correct, export or delete data, restrict or object to processing, withdraw consent and complain to a supervisory authority 
 