Privacy

The desk stores your email, an optional name, a salted hash of your password (never the password), the sessions you open (a hashed token, the time, your browser's name and IP address), and your subscription periods and payment references. Card, UPI and bank details are entered on Razorpay's page and never reach this site.

The session cookie is HttpOnly, sent only over HTTPS, and expires after 30 days. A light preference (dark or light theme) is kept in your browser alone.

No advertising, no trackers, no sale of data. Email is used for the account and for notices about it. To delete the account, write to the desk from the account's email; data is removed within a reasonable period, except payment records kept as the law requires.