Your account is private
We store your email address, chosen name, time zone, and whether you want to offer language services, hire professionals, or both. These details support your account and are not published in a directory.
Signing in securely
We use an essential session cookie to keep you signed in. It expires after seven days. You can revoke individual sessions or sign out everywhere in Security & sessions. We store hashed session secrets, protected sign-in codes, and a general browser and device label.
Security records
Account updates and sign-in events are recorded for security. Rate limits use protected identifiers to reduce abuse. Ordinary application logs do not contain your sign-in codes or session secrets.
No advertising tracking
This foundation does not include advertising trackers, payments, identity-document uploads, or a public professional profile. Production sign-in will use Cloudflare Turnstile and an email-delivery provider.
Local development
When running locally, data is stored in a local D1 database, and development emails are stored in a private outbox on the developer’s machine. No real email is sent in this mode.
Before public launch
This is a development privacy notice, not the final public-service policy. Operator contact details, retention periods, international data handling, and account export and deletion processes must be finalized before accepting public registrations.