Last updated: May 28, 2026
| Data | Purpose | Retention |
|---|---|---|
| Email address | Account authentication, purchase receipts | Until account deletion |
| Password (hashed) | Authentication | Until account deletion |
| Purchase history | Content access control | Until account deletion |
| Session data | Concurrent session management | Auto-deleted after 30 days |
| IP address | Security, abuse prevention | Server logs deleted after 30 days |
We do not use your data for advertising, profiling, or marketing purposes.
| Service | Purpose | Data shared |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, authentication, database | Email, session data |
| Stripe | Payment processing | Email, payment details (handled by Stripe) |
| Google Analytics | Usage analytics | Anonymous page views, session data (via cookies) |
We do not sell or share your data with any other third parties.
phystrail_token — Authentication token (session cookie, secure, httpOnly equivalent)phystrail_session — Session identifierWe use Google Analytics 4 to understand how visitors use the site (pages visited, session duration, geographic region). Google Analytics uses cookies to collect anonymous usage data. You can opt out by using a browser extension or disabling cookies. See Google's Privacy Policy.
To exercise these rights, contact support@phystrail.com.
We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access-controlled cloud infrastructure. However, no system is 100% secure.
The Service is not directed at children under 16. We do not knowingly collect data from children under 16.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
For privacy-related inquiries: support@phystrail.com