Skip to content
← Back to home

Privacy Policy

Last updated: 2026-07-08

This Policy explains what we collect, why, and your choices. We keep data collection to what we need to run AstraBourse for you.

1. Information We Collect

  • Account data: your email address and password (stored only as a salted Argon2 hash — we never see your password).
  • Subscription data: your plan, billing status, and payment records handled by our payment processors (we do not store full card numbers).
  • Content you provide: lists, dates, and charts you upload or create.
  • Technical data: IP address, browser type, and basic usage logs needed for security and rate-limiting.

2. How We Use Information

We use your information to provide and secure the Service, process subscriptions, respond to support requests, prevent abuse (including detecting shared accounts), and comply with legal obligations. We do not sell your personal data.

3. Cookies & Local Storage

We use a strictly-necessary httpOnly cookie to keep you signed in, and browser local storage to remember your session and display preferences (theme, language). We do not use third-party advertising or tracking cookies.

4. Sharing & Third Parties

We share data only with service providers that help us operate — for example payment processors, email delivery, and cloud hosting — under agreements that limit their use of it. We may disclose data where required by law.

5. Data Retention

We keep your data while your account is active and as needed to meet legal, tax, and security obligations. When you delete your account we remove or anonymise your personal data within a reasonable period, except records we must retain by law.

6. Security

We protect data with encryption in transit (HTTPS/HSTS), Argon2 password hashing, strict security headers and a content-security policy, rate limiting, and least-privilege access. No system is perfectly secure, but we work to safeguard your information.

7. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us at the address below.

8. International Transfers

Your data may be processed in countries other than yours. Where it is, we take steps to ensure it receives an adequate level of protection.

9. Changes to This Policy

We may update this Policy; we will post the new version here and update the “last updated” date. Material changes will be communicated where appropriate.

10. Contact

Privacy questions or requests? Contact us at [email protected].