What we store about you, in plain words.
What we collect
Your email and name, a password hash, the names in your book and your alerts. While you’re signed in: page views and searches (user_events), the device and IP of each session (user_sessions) and the IP of each successful sign-in (user_login_ips), kept to protect the account. If you pay, Stripe holds your card; we keep the customer id and billing events Stripe sends us.
What we don’t collect
No tracking of signed-out visitors. No IPs in usage events. No advertising cookies, no third-party analytics, no data sales.
How data is used
To run the product: your book and alerts, your personal record, Ask’s context and the email you asked for. Aggregated and anonymised counts appear in the admin insights. Questions you ask are stored with their answers so a person can review a hand-off.
Cookies
| Cookie | Why | Lasts |
|---|---|---|
| flowdesk_session | Keeps you signed in (HttpOnly, SameSite=Lax) | 30 days |
| fd_edition | Paper, Night or Follow my system | 1 year |
Data requests
Export or delete everything from My book → Account → Privacy & data. Deletion is immediate for your book, alerts, keys and Ask history, and within 30 days for backups. Email support@ricktorious.com for anything else.
Changes
Every change to this page gets a new version line below, dated, with what changed.
Version v2, 30 Sep 2026: rewritten on the Ledger template to match the code (sessions, devices, the edition cookie, export and delete, auto-trade admin-only).