Without an account: your marks (✓ I have it, ◎ I'm chasing it) live only in your browser; they never reach a server. With a Google account: your email, your name and your profile picture as Google gives them, your marks with their settings (favourite, hidden) and the country you signed up from and last signed in from, which we infer from your connection: we keep only the country, never your IP. Nothing else.
On our own server. No external analytics, no trackers, no third-party pixels. The only cookie is your session cookie, required for the account to work. We measure usage anonymously and in aggregate on our own server (visits, what gets searched) — without identifying you, storing your IP, or tracking cookies.
Nothing, unless you make your album public. Then your @, the cards you choose (each card's eye hides it individually) and, if you want, your photo are shown. What you paid and your private notes never travel.
Account menu → “Delete my account”: removes your account, album, public profile and marks, for real and with no way back. We keep no copy beyond routine backups, which rotate on their own.
Access, rectification and erasure: your album IS the access, editing it is rectification, deletion is erasure. For anything else, a contact channel will be published here soon.