Know what
is public.

Public content. We store and display belief text, the alias you provide, shield count, token count, and timestamps. This content can be displaced by the product's eviction rules but may remain in security logs or backups for a limited period.

Technical data. Hosting and security providers may process IP address, browser and request data to deliver the site, prevent abuse, and diagnose errors.

Account data. If you sign in, we store a keyed hash of your email address rather than the address itself, plus hashed sign-in links that expire in 15 minutes and hashed device sessions that expire in 30 days. Our email provider processes your address only to deliver sign-in email. You can delete your account from the account page; that removes your sign-in, session, and account data. Unused paid moves must be refunded before an account can be deleted. Sign-in rate-limit counters are keyed by hashes rather than raw addresses and are removed within a day, and resolved paid-move records are retained for 30 days so a retried request is never charged twice, then deleted.

Payments. When paid checkout is enabled, our merchant-of-record payment provider will process payment, identity, tax, and transaction data under its own privacy terms. Doxomachy will receive transaction status and identifiers needed to credit moves and support purchases, not full card details. Until paid checkout launches, no payment or order records exist; once it launches, order records are retained for accounting and refund support as described in the refunds policy.

Why and sharing. Data is used to operate the shared mind, fulfill purchases, moderate abuse, provide support, secure the service, and meet legal duties. Service providers receive only what they need for those purposes. We do not sell personal information.

Requests. To ask about access, correction, deletion, or a public-content takedown, email support@flcrom.dev. Some information may be retained where needed for security, disputes, accounting, or law.