Privacy Policy

Last updated: August 19, 2026

1. Information We Collect

We collect the following information when you use the Service:

• Account information: username, display name, and password hash
• Email addresses: for account verification and recovery
• Passkey credentials: public keys for passwordless sign-in
• Session data: browser type, IP address, and login timestamps
• Authorized applications: list of third-party apps you grant access

2. How We Use Your Information

• To authenticate you and maintain your account
• To send account verification and security emails
• To enforce security measures and rate limiting
• To display your profile to applications you authorize

3. Data Sharing

We do not sell your personal data. Your profile information is only shared with third-party applications you explicitly authorize. We may disclose information if required by law.

4. Data Storage & Security

Your data is stored in encrypted databases hosted on Cloudflare's infrastructure. Passwords are hashed with strong algorithms. We implement industry-standard security measures including CSRF protection, rate limiting, and secure session management.

5. Cookies & Sessions

We use strictly necessary cookies for session management and authentication. These are essential for the Service to function and cannot be disabled.

6. Your Rights

You have the right to:

• Access and update your profile information
• Download your account data
• Delete your account and associated data
• Revoke access for any third-party application
• Revoke active sessions

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your personal data within 30 days. Some anonymized data may be retained for security and operational purposes.

8. Contact

For questions about this policy, contact us at privacy@lsong.org.