Privacy Policy

We collect only what we need to run the service:

• Account email. When you sign in, we store your email address so we can recognize you and send sign-in links.
• Subscription status. We store whether your subscription is active and which plan you're on, so we can unlock premium features. This information comes to us from our payment processor, Stripe.
• Basic technical data. Like most websites, our hosting provider may log routine data (such as IP address, browser type, and pages visited) to keep the site secure and running.

Card payments are processed by Stripe. Your full card number goes directly to Stripe; we never see or store it. We receive only your subscription status and limited billing metadata (such as which plan you chose). Stripe's own privacy policy governs how Stripe handles your payment data.

We use a small number of cookies:

• Sign-in / session cookies — to keep you logged in.
• Preference cookies — for things like remembering your reading mode on topic pages.

We do not use third-party advertising cookies and we do not track you across other websites for advertising.

• To provide and operate the service (sign-in, subscriptions).
• To send transactional emails, like sign-in links and receipts.
• To keep the service secure and prevent abuse.
• To understand aggregate usage (e.g., which topics are popular) so we can improve the site.

We do not sell your personal information. We do not share your email or account data with advertisers, data brokers, or other third parties for their marketing. We share data only with the service providers needed to run the site (hosting, email delivery, and Stripe for payments), and only as much as they need.

We keep your account data for as long as your account exists. You can ask us to delete your account and personal data at any time by emailing us (see contact below); we will delete it within 30 days, except where we must keep limited records for legal, tax, or fraud-prevention reasons.

We use reasonable technical and organizational measures to protect your data — including encrypted connections (HTTPS) and vetted infrastructure providers. No method of transmission over the internet is 100% secure, but we work to keep your information safe.

The service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version here with a new “last updated” date, and for material changes we will notify account holders by email.

Privacy questions or deletion requests? Email us at onthisrockai@gmail.com.