Privacy Policy.

What we collect

• Account: your email address and chosen handle/display name.
• Canvas: shapes you draw and save, and their labels and visibility settings.
• Billing: if you subscribe, Stripe holds your payment details; we store only a customer reference, your plan, and subscription status — never card numbers.
• Server logs: IP address and user-agent, kept up to 30 days for security and abuse prevention, then deleted.

What we do not collect

• No tracking or analytics cookies. No fingerprinting.
• No advertising identifiers, retargeting pixels, or ad networks.
• No third-party PII shipping — no analytics user IDs, no marketing profiles.
• No data from anonymous visitors beyond short-lived security logs.

Purpose & lawful basis

• Account email and Canvas shapes: necessary to perform the service you signed up for (contract).
• Server logs: legitimate interest in keeping the service secure; retained 30 days maximum.
• Billing: necessary to provide a paid subscription you requested.

Sub-processors

We use a small number of processors to run the service: Clerk (authentication — stores your email and profile fields), Neon (our Postgres database host), Cloudflare (edge hosting and delivery), and Stripe (payments, only if you subscribe). We do not sell or share your data with advertisers.

Cookies

Akashic uses only functional cookies, so there is no analytics consent banner because there is no analytics tracking:

• __session, __client_uat, __clerk_* — Clerk first-party auth/session cookies.
• akashic-theme — remembers your light/dark preference.
• A legacy better-auth.session_token may persist for pre-migration sessions until that fallback is removed.

Your rights (GDPR & CCPA)

• Access & portability: request a copy of your account data.
• Rectification: edit your profile from your profile.
• Deletion: delete your account; we cascade-delete your profile, Canvas shapes, and auth records within 30 days.
• Objection: limited applicability since we do not market to you.

To exercise any right, email privacy@akashic.app.

Children

Akashic is not directed to children and does not knowingly collect data from anyone under 13. Sign-up requires attesting that you are 13 or older. If we learn a child under 13 has registered, we delete the account and its data.

Changes & contact

Material changes are published here with a new date and notified to opted-in subscribers by newsletter. Questions: privacy@akashic.app. See also our Terms and DMCA policy.