Last updated: see git history for this page. Data controller: Saksham Haritash.
What we actually process
This section describes only the processing this product actually performs — nothing more.
Google account information: when you sign in, we receive your email address and Google account identifier ("sub") from Google. We do not request or receive your Google password.
Account identifiers: an internal account record linking your email to your subscription status.
Session/cookie data: a single HttpOnly session cookie identifying your logged-in session. We store only a one-way hash of this value, never the raw token.
Stripe customer/subscription identifiers: your Stripe customer ID, subscription ID, plan, and subscription status, so we know whether your account has active Pro access. We do not store your card number or other payment-card credentials — Stripe processes and stores all payment information directly.
Hosting: the service runs on Cloudflare Workers and Cloudflare D1 (database), both operated by Cloudflare, Inc.
Website analytics: first-party, privacy-conscious counts of page views and button clicks (e.g. homepage views, pricing-page views, checkout starts) recorded directly by our own server — no third-party analytics script, no cross-site tracking, no advertising identifiers.
Security/operational logs: standard request logs and error logs used to operate and secure the service (e.g. detecting abuse, diagnosing failures).
Why we process it
To authenticate you, provide and bill for the Pro subscription, determine which content your account is entitled to see, keep the service secure and operating correctly, and understand aggregate (not individual) usage of the site.
Retention
Account and subscription records are kept for as long as your account is active, plus a reasonable period afterward for legal, accounting, and dispute-resolution purposes. Session data expires automatically (currently after 30 days of inactivity). Aggregate analytics counts are not linked to your identity.
Who else processes your data
Google LLC — authentication (Google Sign-In).
Stripe, Inc. — payment processing, billing, and the Customer Portal.
Cloudflare, Inc. — hosting, database, and content delivery.
We do not sell your personal data.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, contact us using the details below.
Contact
Saksham Haritash Beverly Park Apartments 601/10, Sector 22 Dwarka, Dwarka, New Delhi, Delhi, 110077, India Privacy contact: sakshamharitash27@gmail.com
This page describes our actual data processing as accurately as we can, but is not a substitute for professional legal review. It should be reviewed by a qualified solicitor before the product accepts real payments, particularly regarding UK GDPR/Data Protection Act obligations.