[{"data":1,"prerenderedAt":915},["ShallowReactive",2],{"\u002Fprivacy-policy":3,"mdc--hcc1yz-key":73,"mdc--l6t9jl-key":96,"mdc--b3n8j-key":118,"mdc--9zszd7-key":181,"mdc--ag07bg-key":231,"mdc--wc2mvw-key":283,"mdc--m97sn1-key":325,"mdc--z32881-key":443,"mdc-yfmqgr-key":529,"mdc--rq0obo-key":586,"mdc-k620zk-key":628,"mdc--ssyx1p-key":685,"mdc-drx6w6-key":761,"mdc--vbxjzq-key":857,"mdc-v1x953-key":866,"mdc--rk3t0b-key":875,"mdc-jq8n8l-key":884},{"id":4,"title":5,"body":6,"description":7,"extension":8,"lastUpdated":9,"meta":10,"navigation":11,"path":12,"sections":13,"seo":68,"stem":71,"__hash__":72},"pages\u002Fpages\u002Fprivacy-policy.yml","Privacy Policy",null,"How we collect, use, and protect your personal data.","yml","September 6, 2026",{},true,"\u002Fpages\u002Fprivacy-policy",[14,17,35,38,41,44,47,50,53,56,59,62,65],{"title":15,"content":16},"Introduction","CraftCodely SRL (\"we,\" \"us,\" or \"our\") operates BeyondFolder at beyondfolder.com — a site that presents our products (Docuyond, Omniyond, Mailyond, NuxtBeyond and the Distribution Framework), publishes free SaaS calculators, and hosts the Directories submission tracker.\n\nThis Privacy Policy explains what we collect, why we collect it, and what you can do about it. We are committed to protecting your privacy and to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.\n\nBy using beyondfolder.com, you agree to the practices described in this policy. If you do not agree, please do not use the site.\n",{"title":18,"subsections":19},"Information We Collect",[20,23,26,29,32],{"subtitle":21,"content":22},"Browsing the marketing site and free tools","You do not need an account to read our product pages or use the free calculators. The calculators run entirely in your browser — **the numbers you type into them are never sent to our servers and are never stored**.\n\nWe collect only privacy-friendly, aggregated analytics about page views (see \"Analytics\" below).\n",{"subtitle":24,"content":25},"Account information (Directories tracker)","To use the Directories tracker at `\u002Fdashboard` you create an account. We collect and store:\n\n- **Email address** — your account identity, used for verification, password resets and service notices\n- **Password** — never stored in readable form; we store only a salted scrypt hash\n- **Email verification and password reset tokens** — stored hashed, and short-lived (24 hours and 1 hour respectively)\n- **Account creation date** and the sign-in method you used\n",{"subtitle":27,"content":28},"Google sign-in data","If you choose \"Continue with Google\", Google returns a limited profile to us. We request the **email** scope only, and we store:\n\n- **Your email address**\n- **Your Google account identifier (`sub`)** — used to link your Google account to your BeyondFolder account\n\nWe do not request or receive your Google contacts, calendar, Drive files, or any other Google service data. See the \"Google User Data\" section below for how this data is used and how to revoke access.\n",{"subtitle":30,"content":31},"Content you create in the tracker","When you use the Directories tracker we store the data you enter:\n\n- **Projects** — the name and optional URL of each product or site you track\n- **Submissions** — which directory you submitted a project to, its status, the resulting listing URL, dates and any notes you write\n- **Custom directories** — directories you add yourself, which stay private to your account\n- **API keys** — stored only as a SHA-256 hash plus a short non-secret display prefix, along with the label, scope and last-used timestamp\n",{"subtitle":33,"content":34},"Technical information","Like any website, our infrastructure processes some technical data to serve requests and to keep the service secure:\n\n- **IP address** — used transiently for abuse prevention and rate limiting (stored in short-lived rate-limit counters, typically for 15 minutes or less)\n- **Browser and device information** — sent by your browser with each request\n- **Server logs** — generated by our hosting provider for reliability and security\n",{"title":36,"content":37},"How We Use Your Information","We use the information above only for the following purposes:\n\n- **Providing the service** — creating your account, signing you in, and storing the projects and submissions you track\n- **Account security** — verifying your email address, resetting passwords, rate limiting sign-in attempts, and blocking automated abuse\n- **Service communication** — sending transactional email such as verification and password reset messages\n- **Improving the site** — understanding, in aggregate, which pages and tools people find useful\n- **Legal compliance** — meeting our legal obligations and enforcing our Terms of Service\n\nWe rely on these legal bases under the GDPR:\n\n- **Contract performance** — processing needed to give you the account and features you asked for\n- **Legitimate interests** — keeping the service secure and improving it, balanced against your rights\n- **Consent** — where you have explicitly opted in, for example by choosing Google sign-in\n- **Legal obligation** — where the law requires us to retain or disclose information\n\n**We do not sell your personal data, and we do not use it to serve advertising.**\n",{"title":39,"content":40},"Google User Data","This section describes our use of data obtained through Google sign-in, in line with the Google API Services User Data Policy, including the Limited Use requirements.\n\n- **What we request** — the `email` scope only\n- **What we store** — your email address and your Google account identifier\n- **What we use it for** — solely to create and authenticate your BeyondFolder account. Nothing else.\n- **What we do not do** — we do not sell this data, we do not use it for advertising or profiling, we do not transfer it to third parties except the infrastructure providers listed below that host the data on our behalf, and we do not use it to train machine learning or AI models\n- **Revoking access** — you can disconnect BeyondFolder at any time from your [Google Account permissions page](https:\u002F\u002Fmyaccount.google.com\u002Fpermissions). Revoking access does not delete your BeyondFolder account; to delete the account itself, email us at support@beyondfolder.com\n",{"title":42,"content":43},"Data Sharing and Third Parties","We do not sell, rent, or trade your personal data. We share it only with the service providers that make BeyondFolder work, each acting as a processor on our behalf:\n\n- **Cloudflare** — hosting, DNS, the D1 database that stores your account and tracker data, key-value storage for rate limits, and the Turnstile anti-bot challenge on our sign-in and sign-up forms\n- **Mailyond** (our own email product, operated by CraftCodely SRL) — delivery of transactional email such as verification and password reset messages\n- **Google** — identity verification, only if you choose Google sign-in\n- **Datafa.st** — privacy-friendly, cookieless website analytics\n\nWe may also disclose information where we are legally required to do so, or where it is necessary to protect our rights, safety, or property.\n",{"title":45,"content":46},"Cookies and Analytics","- **Session cookie** — when you sign in to the Directories tracker we set an encrypted, HTTP-only session cookie so that you stay signed in. It is strictly necessary for the tracker to function and expires after 30 days.\n- **Turnstile** — Cloudflare's bot challenge may set its own technical cookie or local storage entry on our authentication pages to distinguish humans from bots.\n- **Analytics** — we use Datafa.st, which is cookieless and does not build cross-site profiles of visitors. It gives us aggregate counts such as page views and referrers.\n\nWe do not use advertising cookies, retargeting pixels, or third-party trackers.\n",{"title":48,"content":49},"Data Retention","- **Account and tracker data** — kept for as long as your account exists\n- **Verification and reset tokens** — 24 hours and 1 hour respectively, then cleared\n- **Rate-limit counters** — automatically expire, typically within 15 minutes\n- **Deleted content** — deleting a project immediately deletes its submissions and any API keys scoped to it; deleting your account removes your account record, projects, submissions, custom directories and API keys\n- **Backups and logs** — residual copies may persist in provider backups and security logs for a short period before being overwritten\n",{"title":51,"content":52},"Data Security","We take the following concrete measures to protect your data:\n\n- **Passwords** are hashed with scrypt and a per-user random salt; we never store or log the plaintext\n- **API keys** are stored only as SHA-256 hashes — if our database were exposed, the keys themselves could not be recovered from it\n- **Tokens** for email verification and password resets are stored hashed and expire quickly\n- **Transport encryption** — all traffic is served over HTTPS\n- **Isolation** — each account can only read and write its own projects, submissions and API keys; the shared directory catalog is read-only\n- **Abuse protection** — Cloudflare Turnstile plus per-IP and per-account rate limits on authentication endpoints\n\nNo system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by law.\n",{"title":54,"content":55},"Your Rights","Depending on where you live, you have some or all of the following rights:\n\n- **Access** — request a copy of the personal data we hold about you\n- **Rectification** — correct inaccurate data; you can edit your projects and submissions directly in the app\n- **Erasure** — request deletion of your account and associated data\n- **Portability** — receive your tracker data in a machine-readable format\n- **Restriction and objection** — ask us to limit or stop certain processing\n- **Withdraw consent** — for example by disconnecting Google sign-in\n- **Complain** — lodge a complaint with your local data protection authority\n\nTo exercise any of these rights, email **support@beyondfolder.com**. We respond within 30 days.\n",{"title":57,"content":58},"International Data Transfers","We are based in Romania (European Union). Our providers may process data on servers outside your country, including in the United States. Where data leaves the European Economic Area, those transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.\n",{"title":60,"content":61},"Children's Privacy","BeyondFolder is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us and we will delete it.\n",{"title":63,"content":64},"Changes to This Policy","We may update this Privacy Policy as the service evolves. When we do, we will change the \"Last updated\" date at the top of this page, and for material changes we will notify account holders by email. Continued use of the service after an update means you accept the revised policy.\n",{"title":66,"content":67},"Contact Us","Questions about this Privacy Policy or about your data:\n\n**CraftCodely SRL**\n\nEmail: support@beyondfolder.com\n\nLocation: Romania\n",{"title":69,"description":70},"Privacy Policy | BeyondFolder","How BeyondFolder collects, uses, and protects your personal data across beyondfolder.com, its free tools, and the Directories tracker.","pages\u002Fprivacy-policy","89fAxUDRaJKhXwbS01K8dUq_U8K01tLQmXxsTyZNlYo",{"data":74,"body":75},{},{"type":76,"children":77},"root",[78,86,91],{"type":79,"tag":80,"props":81,"children":82},"element","p",{},[83],{"type":84,"value":85},"text","CraftCodely SRL (\"we,\" \"us,\" or \"our\") operates BeyondFolder at beyondfolder.com — a site that presents our products (Docuyond, Omniyond, Mailyond, NuxtBeyond and the Distribution Framework), publishes free SaaS calculators, and hosts the Directories submission tracker.",{"type":79,"tag":80,"props":87,"children":88},{},[89],{"type":84,"value":90},"This Privacy Policy explains what we collect, why we collect it, and what you can do about it. We are committed to protecting your privacy and to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.",{"type":79,"tag":80,"props":92,"children":93},{},[94],{"type":84,"value":95},"By using beyondfolder.com, you agree to the practices described in this policy. If you do not agree, please do not use the site.",{"data":97,"body":98},{},{"type":76,"children":99},[100,113],{"type":79,"tag":80,"props":101,"children":102},{},[103,105,111],{"type":84,"value":104},"You do not need an account to read our product pages or use the free calculators. The calculators run entirely in your browser — ",{"type":79,"tag":106,"props":107,"children":108},"strong",{},[109],{"type":84,"value":110},"the numbers you type into them are never sent to our servers and are never stored",{"type":84,"value":112},".",{"type":79,"tag":80,"props":114,"children":115},{},[116],{"type":84,"value":117},"We collect only privacy-friendly, aggregated analytics about page views (see \"Analytics\" below).",{"data":119,"body":120},{},{"type":76,"children":121},[122,136],{"type":79,"tag":80,"props":123,"children":124},{},[125,127,134],{"type":84,"value":126},"To use the Directories tracker at ",{"type":79,"tag":128,"props":129,"children":131},"code",{"className":130},[],[132],{"type":84,"value":133},"\u002Fdashboard",{"type":84,"value":135}," you create an account. We collect and store:",{"type":79,"tag":137,"props":138,"children":139},"ul",{},[140,151,161,171],{"type":79,"tag":141,"props":142,"children":143},"li",{},[144,149],{"type":79,"tag":106,"props":145,"children":146},{},[147],{"type":84,"value":148},"Email address",{"type":84,"value":150}," — your account identity, used for verification, password resets and service notices",{"type":79,"tag":141,"props":152,"children":153},{},[154,159],{"type":79,"tag":106,"props":155,"children":156},{},[157],{"type":84,"value":158},"Password",{"type":84,"value":160}," — never stored in readable form; we store only a salted scrypt hash",{"type":79,"tag":141,"props":162,"children":163},{},[164,169],{"type":79,"tag":106,"props":165,"children":166},{},[167],{"type":84,"value":168},"Email verification and password reset tokens",{"type":84,"value":170}," — stored hashed, and short-lived (24 hours and 1 hour respectively)",{"type":79,"tag":141,"props":172,"children":173},{},[174,179],{"type":79,"tag":106,"props":175,"children":176},{},[177],{"type":84,"value":178},"Account creation date",{"type":84,"value":180}," and the sign-in method you used",{"data":182,"body":183},{},{"type":76,"children":184},[185,197,226],{"type":79,"tag":80,"props":186,"children":187},{},[188,190,195],{"type":84,"value":189},"If you choose \"Continue with Google\", Google returns a limited profile to us. We request the ",{"type":79,"tag":106,"props":191,"children":192},{},[193],{"type":84,"value":194},"email",{"type":84,"value":196}," scope only, and we store:",{"type":79,"tag":137,"props":198,"children":199},{},[200,208],{"type":79,"tag":141,"props":201,"children":202},{},[203],{"type":79,"tag":106,"props":204,"children":205},{},[206],{"type":84,"value":207},"Your email address",{"type":79,"tag":141,"props":209,"children":210},{},[211,224],{"type":79,"tag":106,"props":212,"children":213},{},[214,216,222],{"type":84,"value":215},"Your Google account identifier (",{"type":79,"tag":128,"props":217,"children":219},{"className":218},[],[220],{"type":84,"value":221},"sub",{"type":84,"value":223},")",{"type":84,"value":225}," — used to link your Google account to your BeyondFolder account",{"type":79,"tag":80,"props":227,"children":228},{},[229],{"type":84,"value":230},"We do not request or receive your Google contacts, calendar, Drive files, or any other Google service data. See the \"Google User Data\" section below for how this data is used and how to revoke access.",{"data":232,"body":233},{},{"type":76,"children":234},[235,240],{"type":79,"tag":80,"props":236,"children":237},{},[238],{"type":84,"value":239},"When you use the Directories tracker we store the data you enter:",{"type":79,"tag":137,"props":241,"children":242},{},[243,253,263,273],{"type":79,"tag":141,"props":244,"children":245},{},[246,251],{"type":79,"tag":106,"props":247,"children":248},{},[249],{"type":84,"value":250},"Projects",{"type":84,"value":252}," — the name and optional URL of each product or site you track",{"type":79,"tag":141,"props":254,"children":255},{},[256,261],{"type":79,"tag":106,"props":257,"children":258},{},[259],{"type":84,"value":260},"Submissions",{"type":84,"value":262}," — which directory you submitted a project to, its status, the resulting listing URL, dates and any notes you write",{"type":79,"tag":141,"props":264,"children":265},{},[266,271],{"type":79,"tag":106,"props":267,"children":268},{},[269],{"type":84,"value":270},"Custom directories",{"type":84,"value":272}," — directories you add yourself, which stay private to your account",{"type":79,"tag":141,"props":274,"children":275},{},[276,281],{"type":79,"tag":106,"props":277,"children":278},{},[279],{"type":84,"value":280},"API keys",{"type":84,"value":282}," — stored only as a SHA-256 hash plus a short non-secret display prefix, along with the label, scope and last-used timestamp",{"data":284,"body":285},{},{"type":76,"children":286},[287,292],{"type":79,"tag":80,"props":288,"children":289},{},[290],{"type":84,"value":291},"Like any website, our infrastructure processes some technical data to serve requests and to keep the service secure:",{"type":79,"tag":137,"props":293,"children":294},{},[295,305,315],{"type":79,"tag":141,"props":296,"children":297},{},[298,303],{"type":79,"tag":106,"props":299,"children":300},{},[301],{"type":84,"value":302},"IP address",{"type":84,"value":304}," — used transiently for abuse prevention and rate limiting (stored in short-lived rate-limit counters, typically for 15 minutes or less)",{"type":79,"tag":141,"props":306,"children":307},{},[308,313],{"type":79,"tag":106,"props":309,"children":310},{},[311],{"type":84,"value":312},"Browser and device information",{"type":84,"value":314}," — sent by your browser with each request",{"type":79,"tag":141,"props":316,"children":317},{},[318,323],{"type":79,"tag":106,"props":319,"children":320},{},[321],{"type":84,"value":322},"Server logs",{"type":84,"value":324}," — generated by our hosting provider for reliability and security",{"data":326,"body":327},{},{"type":76,"children":328},[329,334,387,392,435],{"type":79,"tag":80,"props":330,"children":331},{},[332],{"type":84,"value":333},"We use the information above only for the following purposes:",{"type":79,"tag":137,"props":335,"children":336},{},[337,347,357,367,377],{"type":79,"tag":141,"props":338,"children":339},{},[340,345],{"type":79,"tag":106,"props":341,"children":342},{},[343],{"type":84,"value":344},"Providing the service",{"type":84,"value":346}," — creating your account, signing you in, and storing the projects and submissions you track",{"type":79,"tag":141,"props":348,"children":349},{},[350,355],{"type":79,"tag":106,"props":351,"children":352},{},[353],{"type":84,"value":354},"Account security",{"type":84,"value":356}," — verifying your email address, resetting passwords, rate limiting sign-in attempts, and blocking automated abuse",{"type":79,"tag":141,"props":358,"children":359},{},[360,365],{"type":79,"tag":106,"props":361,"children":362},{},[363],{"type":84,"value":364},"Service communication",{"type":84,"value":366}," — sending transactional email such as verification and password reset messages",{"type":79,"tag":141,"props":368,"children":369},{},[370,375],{"type":79,"tag":106,"props":371,"children":372},{},[373],{"type":84,"value":374},"Improving the site",{"type":84,"value":376}," — understanding, in aggregate, which pages and tools people find useful",{"type":79,"tag":141,"props":378,"children":379},{},[380,385],{"type":79,"tag":106,"props":381,"children":382},{},[383],{"type":84,"value":384},"Legal compliance",{"type":84,"value":386}," — meeting our legal obligations and enforcing our Terms of Service",{"type":79,"tag":80,"props":388,"children":389},{},[390],{"type":84,"value":391},"We rely on these legal bases under the GDPR:",{"type":79,"tag":137,"props":393,"children":394},{},[395,405,415,425],{"type":79,"tag":141,"props":396,"children":397},{},[398,403],{"type":79,"tag":106,"props":399,"children":400},{},[401],{"type":84,"value":402},"Contract performance",{"type":84,"value":404}," — processing needed to give you the account and features you asked for",{"type":79,"tag":141,"props":406,"children":407},{},[408,413],{"type":79,"tag":106,"props":409,"children":410},{},[411],{"type":84,"value":412},"Legitimate interests",{"type":84,"value":414}," — keeping the service secure and improving it, balanced against your rights",{"type":79,"tag":141,"props":416,"children":417},{},[418,423],{"type":79,"tag":106,"props":419,"children":420},{},[421],{"type":84,"value":422},"Consent",{"type":84,"value":424}," — where you have explicitly opted in, for example by choosing Google sign-in",{"type":79,"tag":141,"props":426,"children":427},{},[428,433],{"type":79,"tag":106,"props":429,"children":430},{},[431],{"type":84,"value":432},"Legal obligation",{"type":84,"value":434}," — where the law requires us to retain or disclose information",{"type":79,"tag":80,"props":436,"children":437},{},[438],{"type":79,"tag":106,"props":439,"children":440},{},[441],{"type":84,"value":442},"We do not sell your personal data, and we do not use it to serve advertising.",{"data":444,"body":445},{},{"type":76,"children":446},[447,452],{"type":79,"tag":80,"props":448,"children":449},{},[450],{"type":84,"value":451},"This section describes our use of data obtained through Google sign-in, in line with the Google API Services User Data Policy, including the Limited Use requirements.",{"type":79,"tag":137,"props":453,"children":454},{},[455,472,482,492,502],{"type":79,"tag":141,"props":456,"children":457},{},[458,463,465,470],{"type":79,"tag":106,"props":459,"children":460},{},[461],{"type":84,"value":462},"What we request",{"type":84,"value":464}," — the ",{"type":79,"tag":128,"props":466,"children":468},{"className":467},[],[469],{"type":84,"value":194},{"type":84,"value":471}," scope only",{"type":79,"tag":141,"props":473,"children":474},{},[475,480],{"type":79,"tag":106,"props":476,"children":477},{},[478],{"type":84,"value":479},"What we store",{"type":84,"value":481}," — your email address and your Google account identifier",{"type":79,"tag":141,"props":483,"children":484},{},[485,490],{"type":79,"tag":106,"props":486,"children":487},{},[488],{"type":84,"value":489},"What we use it for",{"type":84,"value":491}," — solely to create and authenticate your BeyondFolder account. Nothing else.",{"type":79,"tag":141,"props":493,"children":494},{},[495,500],{"type":79,"tag":106,"props":496,"children":497},{},[498],{"type":84,"value":499},"What we do not do",{"type":84,"value":501}," — we do not sell this data, we do not use it for advertising or profiling, we do not transfer it to third parties except the infrastructure providers listed below that host the data on our behalf, and we do not use it to train machine learning or AI models",{"type":79,"tag":141,"props":503,"children":504},{},[505,510,512,521,523],{"type":79,"tag":106,"props":506,"children":507},{},[508],{"type":84,"value":509},"Revoking access",{"type":84,"value":511}," — you can disconnect BeyondFolder at any time from your ",{"type":79,"tag":513,"props":514,"children":518},"a",{"href":515,"rel":516},"https:\u002F\u002Fmyaccount.google.com\u002Fpermissions",[517],"nofollow",[519],{"type":84,"value":520},"Google Account permissions page",{"type":84,"value":522},". Revoking access does not delete your BeyondFolder account; to delete the account itself, email us at ",{"type":79,"tag":513,"props":524,"children":526},{"href":525},"mailto:support@beyondfolder.com",[527],{"type":84,"value":528},"support@beyondfolder.com",{"data":530,"body":531},{},{"type":76,"children":532},[533,538,581],{"type":79,"tag":80,"props":534,"children":535},{},[536],{"type":84,"value":537},"We do not sell, rent, or trade your personal data. We share it only with the service providers that make BeyondFolder work, each acting as a processor on our behalf:",{"type":79,"tag":137,"props":539,"children":540},{},[541,551,561,571],{"type":79,"tag":141,"props":542,"children":543},{},[544,549],{"type":79,"tag":106,"props":545,"children":546},{},[547],{"type":84,"value":548},"Cloudflare",{"type":84,"value":550}," — hosting, DNS, the D1 database that stores your account and tracker data, key-value storage for rate limits, and the Turnstile anti-bot challenge on our sign-in and sign-up forms",{"type":79,"tag":141,"props":552,"children":553},{},[554,559],{"type":79,"tag":106,"props":555,"children":556},{},[557],{"type":84,"value":558},"Mailyond",{"type":84,"value":560}," (our own email product, operated by CraftCodely SRL) — delivery of transactional email such as verification and password reset messages",{"type":79,"tag":141,"props":562,"children":563},{},[564,569],{"type":79,"tag":106,"props":565,"children":566},{},[567],{"type":84,"value":568},"Google",{"type":84,"value":570}," — identity verification, only if you choose Google sign-in",{"type":79,"tag":141,"props":572,"children":573},{},[574,579],{"type":79,"tag":106,"props":575,"children":576},{},[577],{"type":84,"value":578},"Datafa.st",{"type":84,"value":580}," — privacy-friendly, cookieless website analytics",{"type":79,"tag":80,"props":582,"children":583},{},[584],{"type":84,"value":585},"We may also disclose information where we are legally required to do so, or where it is necessary to protect our rights, safety, or property.",{"data":587,"body":588},{},{"type":76,"children":589},[590,623],{"type":79,"tag":137,"props":591,"children":592},{},[593,603,613],{"type":79,"tag":141,"props":594,"children":595},{},[596,601],{"type":79,"tag":106,"props":597,"children":598},{},[599],{"type":84,"value":600},"Session cookie",{"type":84,"value":602}," — when you sign in to the Directories tracker we set an encrypted, HTTP-only session cookie so that you stay signed in. It is strictly necessary for the tracker to function and expires after 30 days.",{"type":79,"tag":141,"props":604,"children":605},{},[606,611],{"type":79,"tag":106,"props":607,"children":608},{},[609],{"type":84,"value":610},"Turnstile",{"type":84,"value":612}," — Cloudflare's bot challenge may set its own technical cookie or local storage entry on our authentication pages to distinguish humans from bots.",{"type":79,"tag":141,"props":614,"children":615},{},[616,621],{"type":79,"tag":106,"props":617,"children":618},{},[619],{"type":84,"value":620},"Analytics",{"type":84,"value":622}," — we use Datafa.st, which is cookieless and does not build cross-site profiles of visitors. It gives us aggregate counts such as page views and referrers.",{"type":79,"tag":80,"props":624,"children":625},{},[626],{"type":84,"value":627},"We do not use advertising cookies, retargeting pixels, or third-party trackers.",{"data":629,"body":630},{},{"type":76,"children":631},[632],{"type":79,"tag":137,"props":633,"children":634},{},[635,645,655,665,675],{"type":79,"tag":141,"props":636,"children":637},{},[638,643],{"type":79,"tag":106,"props":639,"children":640},{},[641],{"type":84,"value":642},"Account and tracker data",{"type":84,"value":644}," — kept for as long as your account exists",{"type":79,"tag":141,"props":646,"children":647},{},[648,653],{"type":79,"tag":106,"props":649,"children":650},{},[651],{"type":84,"value":652},"Verification and reset tokens",{"type":84,"value":654}," — 24 hours and 1 hour respectively, then cleared",{"type":79,"tag":141,"props":656,"children":657},{},[658,663],{"type":79,"tag":106,"props":659,"children":660},{},[661],{"type":84,"value":662},"Rate-limit counters",{"type":84,"value":664}," — automatically expire, typically within 15 minutes",{"type":79,"tag":141,"props":666,"children":667},{},[668,673],{"type":79,"tag":106,"props":669,"children":670},{},[671],{"type":84,"value":672},"Deleted content",{"type":84,"value":674}," — deleting a project immediately deletes its submissions and any API keys scoped to it; deleting your account removes your account record, projects, submissions, custom directories and API keys",{"type":79,"tag":141,"props":676,"children":677},{},[678,683],{"type":79,"tag":106,"props":679,"children":680},{},[681],{"type":84,"value":682},"Backups and logs",{"type":84,"value":684}," — residual copies may persist in provider backups and security logs for a short period before being overwritten",{"data":686,"body":687},{},{"type":76,"children":688},[689,694,756],{"type":79,"tag":80,"props":690,"children":691},{},[692],{"type":84,"value":693},"We take the following concrete measures to protect your data:",{"type":79,"tag":137,"props":695,"children":696},{},[697,707,716,726,736,746],{"type":79,"tag":141,"props":698,"children":699},{},[700,705],{"type":79,"tag":106,"props":701,"children":702},{},[703],{"type":84,"value":704},"Passwords",{"type":84,"value":706}," are hashed with scrypt and a per-user random salt; we never store or log the plaintext",{"type":79,"tag":141,"props":708,"children":709},{},[710,714],{"type":79,"tag":106,"props":711,"children":712},{},[713],{"type":84,"value":280},{"type":84,"value":715}," are stored only as SHA-256 hashes — if our database were exposed, the keys themselves could not be recovered from it",{"type":79,"tag":141,"props":717,"children":718},{},[719,724],{"type":79,"tag":106,"props":720,"children":721},{},[722],{"type":84,"value":723},"Tokens",{"type":84,"value":725}," for email verification and password resets are stored hashed and expire quickly",{"type":79,"tag":141,"props":727,"children":728},{},[729,734],{"type":79,"tag":106,"props":730,"children":731},{},[732],{"type":84,"value":733},"Transport encryption",{"type":84,"value":735}," — all traffic is served over HTTPS",{"type":79,"tag":141,"props":737,"children":738},{},[739,744],{"type":79,"tag":106,"props":740,"children":741},{},[742],{"type":84,"value":743},"Isolation",{"type":84,"value":745}," — each account can only read and write its own projects, submissions and API keys; the shared directory catalog is read-only",{"type":79,"tag":141,"props":747,"children":748},{},[749,754],{"type":79,"tag":106,"props":750,"children":751},{},[752],{"type":84,"value":753},"Abuse protection",{"type":84,"value":755}," — Cloudflare Turnstile plus per-IP and per-account rate limits on authentication endpoints",{"type":79,"tag":80,"props":757,"children":758},{},[759],{"type":84,"value":760},"No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by law.",{"data":762,"body":763},{},{"type":76,"children":764},[765,770,843],{"type":79,"tag":80,"props":766,"children":767},{},[768],{"type":84,"value":769},"Depending on where you live, you have some or all of the following rights:",{"type":79,"tag":137,"props":771,"children":772},{},[773,783,793,803,813,823,833],{"type":79,"tag":141,"props":774,"children":775},{},[776,781],{"type":79,"tag":106,"props":777,"children":778},{},[779],{"type":84,"value":780},"Access",{"type":84,"value":782}," — request a copy of the personal data we hold about you",{"type":79,"tag":141,"props":784,"children":785},{},[786,791],{"type":79,"tag":106,"props":787,"children":788},{},[789],{"type":84,"value":790},"Rectification",{"type":84,"value":792}," — correct inaccurate data; you can edit your projects and submissions directly in the app",{"type":79,"tag":141,"props":794,"children":795},{},[796,801],{"type":79,"tag":106,"props":797,"children":798},{},[799],{"type":84,"value":800},"Erasure",{"type":84,"value":802}," — request deletion of your account and associated data",{"type":79,"tag":141,"props":804,"children":805},{},[806,811],{"type":79,"tag":106,"props":807,"children":808},{},[809],{"type":84,"value":810},"Portability",{"type":84,"value":812}," — receive your tracker data in a machine-readable format",{"type":79,"tag":141,"props":814,"children":815},{},[816,821],{"type":79,"tag":106,"props":817,"children":818},{},[819],{"type":84,"value":820},"Restriction and objection",{"type":84,"value":822}," — ask us to limit or stop certain processing",{"type":79,"tag":141,"props":824,"children":825},{},[826,831],{"type":79,"tag":106,"props":827,"children":828},{},[829],{"type":84,"value":830},"Withdraw consent",{"type":84,"value":832}," — for example by disconnecting Google sign-in",{"type":79,"tag":141,"props":834,"children":835},{},[836,841],{"type":79,"tag":106,"props":837,"children":838},{},[839],{"type":84,"value":840},"Complain",{"type":84,"value":842}," — lodge a complaint with your local data protection authority",{"type":79,"tag":80,"props":844,"children":845},{},[846,848,855],{"type":84,"value":847},"To exercise any of these rights, email ",{"type":79,"tag":106,"props":849,"children":850},{},[851],{"type":79,"tag":513,"props":852,"children":853},{"href":525},[854],{"type":84,"value":528},{"type":84,"value":856},". We respond within 30 days.",{"data":858,"body":859},{},{"type":76,"children":860},[861],{"type":79,"tag":80,"props":862,"children":863},{},[864],{"type":84,"value":865},"We are based in Romania (European Union). Our providers may process data on servers outside your country, including in the United States. Where data leaves the European Economic Area, those transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.",{"data":867,"body":868},{},{"type":76,"children":869},[870],{"type":79,"tag":80,"props":871,"children":872},{},[873],{"type":84,"value":874},"BeyondFolder is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us and we will delete it.",{"data":876,"body":877},{},{"type":76,"children":878},[879],{"type":79,"tag":80,"props":880,"children":881},{},[882],{"type":84,"value":883},"We may update this Privacy Policy as the service evolves. When we do, we will change the \"Last updated\" date at the top of this page, and for material changes we will notify account holders by email. Continued use of the service after an update means you accept the revised policy.",{"data":885,"body":886},{},{"type":76,"children":887},[888,893,901,910],{"type":79,"tag":80,"props":889,"children":890},{},[891],{"type":84,"value":892},"Questions about this Privacy Policy or about your data:",{"type":79,"tag":80,"props":894,"children":895},{},[896],{"type":79,"tag":106,"props":897,"children":898},{},[899],{"type":84,"value":900},"CraftCodely SRL",{"type":79,"tag":80,"props":902,"children":903},{},[904,906],{"type":84,"value":905},"Email: ",{"type":79,"tag":513,"props":907,"children":908},{"href":525},[909],{"type":84,"value":528},{"type":79,"tag":80,"props":911,"children":912},{},[913],{"type":84,"value":914},"Location: Romania",1788773787317]