Privacy

1. What I collect

• Account: email, display name, avatar if you add one, language and email preferences.
• Access: your Subscriber plan, its term and how it was activated.
• Payments: order code, amount, status and the transaction reference from the bank or payment gateway. I never store card numbers.
• API keys: key name, creation time, last use and call counts. The key itself is stored only as a hash.
• A log of paid pack downloads, to prevent abuse and to help when something goes wrong.

2. What I use it for

Running your account, granting reading and download access, sending sign-in email, receipts and the notifications you turned on, and preventing abuse. I do not sell your data. [Commitments about advertising and analytics need confirmation.]

3. Processors

Cloudflare (hosting, file storage, bot protection), Resend (email), Polar (card payments) and the bank receiving VietQR transfers. [The list and where data is stored need confirmation.]

4. Cookies

Only the cookies and browser storage the site needs: your sign-in session, language and light or dark theme. [Update this section if analytics are added.]

5. Retention

• Account data is kept until you delete your account.
• Orders and receipts are kept [for the period accounting rules require], even after the account is deleted.
• Download logs are kept for [how long].

6. Your rights

You can view and edit your profile on the Account page, turn off each kind of email, delete your account, or ask for a copy of your data at [contact email].

7. Contact

Data controller: Thiệu Nguyễn, personal tax ID [tax ID]. Send privacy questions to [contact email].