Privacy policy

Not yet reviewed by a lawyer. What follows is an accurate description of what this software does with your data, written by the people who built it. It is not a substitute for review against the privacy law that applies to you, and that review has not happened.

If you never sign in

Nothing about you is stored. No account, no cookie, no analytics, no third-party scripts and no advertising network. Pages are rendered on the server, and the only fonts and images are served from this site. Reading any symbol page leaves no record tied to you. The panel in the margin promoting membership is our own, served from this site, and it tracks nothing.

The web server keeps ordinary request logs, which contain IP addresses and the pages requested, for operational purposes such as diagnosing faults and detecting abuse.

If you send a message

The message form stores what you type: the message itself, and the name and email address if you chose to give them. Neither is verified and both are optional. If you happened to be signed in, the message is linked to your account so a reply can find you.

No IP address is stored. The form is rate limited, and it does that by keeping a counter in memory against a salted hash of the address which is never written down and is lost whenever the server restarts — a log of who visited would collect far more than slowing down robots is worth.

Messages are read by the person who runs the site and by nobody else. They are kept rather than deleted, so a conversation still makes sense months later, and are removed along with everything else if you ask for your data to be deleted.

If you submit an idea to the roadmap

The roadmap form stores the title, the description, and the name if you gave one. Unlike a message, an idea is meant to be published: if it is put on the board, the text and the name you chose are visible to everyone. Only what you typed is shown — never an email address, and never an account.

Nothing appears until it has been read by a person, so a submission is not immediately public and can simply be discarded. If you are signed in, your account is recorded against it so it can be removed later at your request.

A vote records only which account voted for which item. It is not shown to anyone: the board displays a total, never who voted.

If you sign in

Signing in is through Google, and is optional. It exists only to hold a membership.

From Google we receive, and store:

• your name, as it appears on your Google account
• your email address, and whether Google has verified it
• the URL of your profile picture
• an identifier for your Google account, and the tokens Google issues for the sign-in itself

We never see your Google password, and we ask Google for nothing beyond the three items above — no contacts, no calendar, no files, no access to anything else in your account.

Signing in sets a cookie holding a session identifier. It is necessary for the site to know you are signed in and is used for nothing else. It is not shared, and it carries no tracking. Signing out ends the session and deletes it from the database.

If you pay

Payment is in cryptocurrency, sent directly to an address shown on the support page. There is no payment processor, so no card details, bank details or billing address ever exist here.

What we store is what you submit and what we decide about it:

• the transaction hash you give us, and which address and plan you say it paid
• the amount you state, and any note you write
• whether it was approved or rejected, when, by whom, and any note about that
• the start and end dates of the membership it granted

A transaction hash is public information on a public blockchain, and everything visible on that chain — the sending address, the amount, the time — is visible to anyone, including us, whether or not you tell us about it. Nothing on this site publishes it.

Rejected and superseded payment records are kept rather than deleted, so that a dispute can be examined afterwards.

Who else sees any of it

Nobody. The data is not sold, rented, shared for advertising, or passed to any analytics or marketing service. It is stored on hardware operated by Options Skew Analytics rather than in a third-party database.

Two third parties are involved by necessity: Google, because it performs the sign-in, and the network that carries traffic to this site. Neither receives your payment records or your membership dates.

The exception is a legal one: we would disclose data if required to by a valid legal order.

How long

Account and payment records are kept while the account exists, and are deleted when you ask for the account to be deleted. Sessions expire on their own. Request logs are kept for a short operational period and then rotated away.

Your choices

You can see everything held about you on your account page — it is a complete list, not a summary. To have it corrected or deleted, or to ask for a copy, write to us.

Deleting the account removes your name, email address, picture, sessions, membership and payment records. It cannot remove anything from a public blockchain, because nobody can.

Contact

[email protected]

Changes

If this policy changes, the date at the top changes with it. Material changes affecting anyone with an account will be sent to the email address on that account.