Privacy Policy
Last updated: December 28, 2025
Information We Collect
We practice strict data minimalism. We only store the minimal technical artifacts required to provide you with secure, automated access.
Used strictly for passwordless Magic Link authentication and critical system notices.
Only public keys and cryptographic attestation tokens are stored. Private keys remain secure on your device.
Encrypted session cookies and JWTs you supply to communicate with third-party platforms on your behalf.
Used for transient in-memory rate limiting. IP addresses are SHA-256 hashed and discarded within minutes.
High-level records of administrative modifications (e.g. role changes or tier shifts) for account protection.
Randomly generated tracing identifiers attached to HTTP transactions for error debugging.
Information We Do Not Collect
We don't sell ads, track user activity, or monetize personal data:
How We Use Technical Data
Authentication
Logging you in safely with passwordless passkeys or magic links.
Archival Execution
Running your archival downloads and generating API signatures for your requested platform accounts.
Service Reliability
Monitoring automated worker pools, rate boundaries, and network health.
Edge Infrastructure & Upstream Providers
Our services execute on globally distributed edge networks. While edge providers may process raw IP traffic for DDoS mitigation at the network boundary, we do not persist IP logs or correlate upstream network records with individual user profiles.
Security Architecture
All client communication is secured with modern TLS cipher suites. Credential storage leverages strong hashing and FIDO2 challenge-response mechanics to eliminate common credential-stuffing and database leakage vulnerabilities.