# Privacy Policy

*(Summary - the full legal text is being finalized)*

What we collect: account data (email encrypted), content you publish, payment records, device and security signals needed to prevent fraud.

How we protect it: AES-256 encryption for sensitive personal data, TLS for all traffic, hashed passwords (argon2), hashed session tokens, strict access controls and full audit logs.

What we never do: sell your personal data.

Your rights (GDPR): export all your data or delete your account from Settings. Deletion is permanent.

Cookies: one session cookie for login, one language preference cookie. No third-party trackers.