Privacy

This page explains the little we process when you use Algrow. It is run by [legal entity name], [registered address].

Your account

• To use the tools you need a free account. We keep your name, email address, and either a password (stored only as a one-way argon2 hash we cannot read back) or, if you continue with Google, Google's account id for you. Google tells us your name and email address; we don't receive your Google password or contacts.
• When you sign up by email or reset a password, we email you a one-time code. Codes are stored only as a keyed hash and expire after 15 minutes.
• Logging in sets one essential cookie, algrow_session, that keeps you logged in for up to 30 days. It holds a random token; we store only its hash. It isn't used for tracking or advertising.
• We use your email only to run your account (codes, password resets, important notices about the service), never for marketing without your consent, and we never sell it. To close your account and erase this data, write to [contact email].

What stays in your browser

• Your current session (date, clock, positions), sessions you choose to save with their notes, and your theme choice, in your browser's local storage. Clearing your browser data deletes them; we never see them.
• A “Share” link carries your session after the # in the address. That part of a link is never sent to our servers; anyone you give the link to can see those simulated positions.

Apart from the login cookie, we set no cookies, and no advertising or tracking cookies at all.

What reaches our servers

Like any website, our servers receive your IP address and the pages and data you request. We use it to serve the site, to apply per-visitor rate limits and to protect the service from abuse. Web server logs are kept for a limited period (normally a few weeks) and then deleted. We do not sell or share this data, except as the law requires.

To know how many people use the simulator, we count visitors per day with a one-way code made from the address and a random key that is changed every day and never stored. Only the daily totals are kept.

If the simulator breaks in your browser, it sends us a short error report: the error message, where in our code it happened and the page address (without the part after #). It contains no positions or sessions, and we keep it in our server logs only to fix bugs.

Service providers

Traffic passes through Cloudflare (network and security) before reaching our servers. Cloudflare processes it under its own privacy terms.

Your rights and contact

Under India's Digital Personal Data Protection Act, 2023 you may ask about, correct or erase personal data we hold about you, and raise grievances. Contact [grievance officer name], [contact email].