Privacy Notice

Draft text for site owner review. Customize with your actual company information, contact details and jurisdiction before publishing the website publicly.

The starter authentication backend collects your username, display name, email address, and a salted password hash and temporary password-reset tokens.

• Password hashes are stored in a Cloudflare D1 database; plaintext passwords are never stored.
• Sign-in sessions use a securely scoped HTTP-only cookie and hashed session tokens in the database.
• Basic request throttling may store a hashed IP-derived key for abuse protection; the owner should define retention and operational safeguards.
• The site owner must add a contact address, applicable legal basis, data retention and deletion procedures, user rights, hosting location details, and other mandatory disclosures.