Privacy policy

The short version: we collect the minimum needed to run contours please! An email address and a drawn site boundary, essentially. We don't sell your data, we don't run ad trackers, and marketing email only ever goes to people who explicitly opted in.

What we collect, and why

• Waitlist: just your email address. It's stored solely to send one launch announcement, then deleted. Joining the waitlist does not add you to a marketing list.
• Account: your email address and a hashed password (we never store the password itself), plus your plan and how many site pulls you've used, which is how the monthly limits work.
• Site analyses: the boundary you draw or upload is processed to build your deliverables (contours, report, exports). Generated deliverables are kept temporarily on our servers so you can download them, then expire.
• Server logs: every request to the site passes through our web gateway, which records the time, the hostname, the page asked for (with anything in the address that looks like a password or token hidden), how the site answered, how long that took, and how big the response was. It also records your network address and the country Cloudflare places it in, your browser's own description of itself (its user agent), and the page that linked you here (its referrer). These records are kept in full for 30 days; after that only daily totals remain (visits, page views, top pages, referrers, countries). They're used only to run and protect the site: addresses that attack the site are banned. They're never sold, never shared, and never used to rank or profile visitors.

Marketing email is opt-in only

At signup there's an unchecked box asking whether you'd like occasional product news and offers. Marketing email goes only to people who check it. You can change your answer any time from your account page, and every marketing email includes a way to opt out. Account and service emails (receipts, password resets, notices about your analyses) are separate and arrive regardless.

The waitlist promise

If you joined the pre-launch waitlist: your email is used once, for the launch announcement, and then deleted. You will not be added to a marketing list by joining the waitlist. If you later create an account and opt in to marketing there, that choice is its own, separate thing.

Cookies and local storage

We use one essential session cookie to keep you logged in. Your light/dark theme choice is stored in your browser's local storage. There are no advertising or cross-site tracking cookies.

Payments

When paid plans open, payments will be handled by Stripe, a payment processor. Your card details go directly to Stripe; we never see or store card numbers. Stripe's handling of your information is covered by Stripe's privacy policy.

What we don't do

• We don't sell or rent your personal information to anyone.
• We don't run third-party analytics or ad trackers.
• We don't send marketing email to anyone who hasn't opted in.

Your choices

You can change your marketing preference from your account page at any time. If you'd like your account or waitlist entry deleted, email [email protected] and we'll take care of it.

Contact

Questions about this policy or your data? Email [email protected]. contours please! is operated from Texas, United States.

Changes

If this policy changes in a way that matters, we'll note the new effective date here, and we won't quietly weaken the commitments above for information collected under this version.