What we store

An account holds your email address, a bcrypt hash of your password, the optional first and last name you supplied, and the timestamps of your registration and last sign-in. The password itself is never stored and cannot be recovered from the hash.

Each active session holds a device identifier generated in your browser (the name of your browser and operating system, plus a random string), the time it was created and the time it was last used. You can see all of them, and end any of them, on the sessions page. A subscription holds the identifiers the payment provider needs and the period it runs for; card details never reach this service.

Because this is a demonstration stand, the database may be reset without notice and no data in it should be treated as durable. Do not register with an address you care about, and do not reuse a password you use anywhere else.