Privacy

What Terrabillion stores, why, and how long. Short version: your email to sign you in, your subscription state to unlock the data, and nothing else.

Account data

Sign-in is passwordless: you enter an email address and open a link we send. We store the address, when the mailbox was verified, and single-use login challenges (15-minute expiry, consumed within a day of use). Sessions last 30 days; signing out revokes them immediately.

Billing data

Subscriptions are processed by Stripe through their hosted checkout and customer portal. Card details go to Stripe, never to us. We keep only the subscription state needed to grant access: customer and subscription identifiers, plan, paid-through date, and synchronization timestamps. Webhook event identifiers are retained at least 90 days to handle redelivery.

Operational data

Rate-limit counters use one-way digests, not raw addresses. Error and delivery logs omit message contents, links, cookies, and full payment payloads. Protected pages and downloads are never cached in shared caches.

Sharing and retention

We don't sell data or share it with advertisers. Expired sessions, spent login links, and rate-limit windows are pruned automatically. Public government publications linked or quoted in records remain available from their publishers under their own terms.

Contact

Operator contact details for privacy questions will be published here before launch.