Privacy Policy

SignalRashin ('the Service') collects only the minimum personal data required to operate the Service and uses it solely for the purposes stated below.

1. Data we collect
Account information: email address, credentials (password), optional display name.
Access logs: request timestamp, URL, User-Agent, Cloudflare-supplied source IP (for rate limiting and abuse detection).
User-saved data: your Requirements, Saved services, and Watched services.

2. Purposes
Authentication, session management, ownership checks.
Rate limiting, abuse detection, security incident response.
Provisioning of Saved / Watched features and change notifications.
Registry quality improvement (aggregate statistics only, never in personally identifiable form).

3. Third-party disclosure
The Service does not disclose personal data to third parties except by lawful demand or with the user's consent.

4. Infrastructure processors
The Service uses Fly.io for hosting and Cloudflare for CDN / WAF. Processing by those providers is governed by their respective terms.

5. Cookies
The Service sets HttpOnly / Secure cookies for CSRF protection (rr_csrf) and session management (rr_session). No tracking cookies are used.

6. Your rights
You may request disclosure or correction of your account data. From Saved & Watches (/stack), you can export your account data as JSON or delete your account and saved data after password re-authentication. Use Contact (/contact) for other requests.

7. Data retention and deletion
Personal data is retained only as long as needed for the stated purposes. Account deletion removes the account, saved items, watches, and conversations, except records under a legal retention obligation. Account deletion is blocked while an active legal hold applies; you may submit a new deletion request after that hold is released. Access logs are deleted after the security retention period.

8. Changes
This policy may be revised; the revision date is displayed at the top of this page.

Last revised: 2026-10-08