1. Information We Collect

We collect: username and password at registration (passwords are stored as SHA-256 salted hashes); document content and metadata you create; share link view counts (counts only). We do not collect real names, email addresses (unless you provide one for payment), or other personally identifiable information.

2. Data Storage

Your data is stored on Cloudflare's global edge network (D1 database and R2 object storage). Data is protected by HTTPS transport encryption. We do not sell or transfer your data to third parties.

3. End-to-End Encryption

When using the encryption feature, document content is encrypted with AES-256-GCM in your browser before upload. Our servers only store ciphertext and cannot access your plaintext content or encryption password. This is zero-knowledge encryption — even we cannot view your encrypted data.

4. Payment Information

Payments are processed through Paddle, a third-party platform. We do not store your credit card numbers or payment details. Paddle handles and protects your payment information. Please refer to Paddle's privacy policy for details.

5. Third-Party Services

We use the following third-party services: Cloudflare (infrastructure and CDN), Paddle (payment processing), Google (OAuth login, optional). These services have their own privacy policies.

6. Cookies

We use a single HttpOnly cookie (ns_token) for authentication. This is a functional cookie, not used for tracking. We do not use third-party tracking cookies or analytics tools.

7. Data Retention

Your data is retained while your account is active. Deleted documents remain in trash for 30 days before permanent deletion. After account deletion, all associated data is purged within a reasonable timeframe.

8. Your Rights

You have the right to access, export, and delete your data. You can export all documents at any time through the settings page. To delete your account and all data, contact support@shuttlelab.org.

9. Policy Changes

We may update this Privacy Policy. Significant changes will be communicated via website announcement. Continued use of the service constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, please contact: support@shuttlelab.org