Privacy

Signing in stores your email address, an account id, and a session token per browser you sign in from. It records which of our apps your account is linked to, and when each session was made.

It holds no password, because there is no password. It sets no analytics or advertising cookies. The cookies it does set are the session, a short-lived one carrying a sign-in between pages, and the address you last signed in with, so you need not type it again. Signing out clears all three.

Sign-in attempts are counted for a minute at a time, by address and by network address, so nobody can use this to send you mail you did not ask for. Those counts are discarded once the minute is up.

If you take a membership, it also stores your Stripe customer and subscription ids, which plan you are on, and when the paid-up period ends. Alongside that it keeps a line for every allowance granted to you and every one you spend, so what you have left is always something you can be shown the working for. Your card details are never sent here — payment happens on Stripe's own pages, and we are told the result.

Nothing here is sold, and nothing is shared beyond the app you are signing in to, which is told your email address, your account id, and — if it asks — whether your membership is current.