privacy policy

this policy explains what docbin, operated by Cryptik Consulting LLC, collects and how we use it. we keep collection to what the service needs to run. we do not sell your data, and we do not run ad networks or third-party tracking scripts.

what we collect

• account data - when you sign in with GitHub we store your GitHub user id, handle, and avatar url. we do not receive your GitHub password.
• your documents - the content, names, types, titles, and metadata of the documents you create, plus their version history.
• billing data - if you subscribe to Pro, we store your Stripe customer id, subscription id, status, and renewal date. payment card details are handled entirely by Stripe; we never see or store them.
• usage data - per-document view counts and a salted daily visitor fingerprint derived from ip and user-agent. the fingerprint is hashed with a rotating daily salt and cannot be reversed to an ip or linked across days. we use ip addresses transiently for rate limiting and abuse prevention.

cookies

signed-in users get a single session cookie so we can keep you logged in. that is the only cookie docbin sets. readers viewing documents are not given cookies, and there are no advertising or analytics cookies.

service providers

we rely on a small number of processors to run docbin:

• Cloudflare - hosting, the D1 database, and R2 storage where documents live, plus edge security.
• GitHub - authentication (OAuth sign-in).
• Stripe - subscription payments. Stripe is the processor of record for your card data under its own privacy policy.

how we use it

to operate and secure the service, render and serve your documents, process Pro subscriptions, enforce our acceptable use policy, and respond to support or legal requests. report submissions may be emailed to our moderation address so we can act on them.

retention

documents are kept until you delete them or they expire. anonymous documents always expire (30 days at most). account and billing records are kept while your account exists and as required for legal and accounting purposes after that.

your choices

you can view, edit, and delete your documents at any time, and change a document’s visibility. to request deletion of your account and associated data, email support@cryptik.consulting. note that public or unlisted content you shared may have been copied or cached by others outside our control.

children

docbin is not directed to children under 13, and we do not knowingly collect their data.

changes

we may update this policy; the “last updated” date above reflects the current version. continued use after a change means you accept it.

contact

privacy questions or requests: support@cryptik.consulting.