LEGAL

Privacy Policy

Effective August 14, 2026

Footon is operated by Douglas Lance as an individual developer. Raw transcripts stay local while you draft; the service receives a thread only when you publish the reviewed draft.

Data Footon processes

Footon stores the published title and sanitized thread, an account identifier, and creation and revocation timestamps. For sign-in, it stores your normalized email address, approved OAuth scopes and client details, hashed one-time codes and tokens, expiry times, and security state. It never stores raw sign-in codes or raw access and refresh tokens.

For paid plans, Footon stores the billing email, Lemon Squeezy customer, order, product, variant, subscription and event identifiers, subscription state and dates, entitlement limit, test-mode flag, and customer-portal URL. Lemon Squeezy is the merchant of record and hosts checkout. Footon does not receive or store payment-card details.

Processors and purposes

Cloudflare provides network delivery, Worker hosting, D1 storage, operational logs, and sign-in email delivery. Lemon Squeezy provides checkout, tax handling, payment processing, subscription administration, and billing records.

Footon uses the data only to provide, secure, support, account for, and improve the service. Footon does not include advertising or third-party behavioral tracking code and does not sell personal information.

Retention and deletion

Active shares remain available until you revoke them. Revocation removes public access immediately; the stored share content is deleted by the daily cleanup within 30 days.

OAuth authorization codes expire after 5 minutes, email codes after 10 minutes, access tokens after 1 hour, refresh tokens after 30 days, and registered clients after 90 days. Expired, used, or revoked credential records are removed by the daily cleanup.

Billing event, subscription, and entitlement records may be retained for up to 7 years after the related transaction or subscription ends for accounting, tax, fraud prevention, dispute handling, and legal compliance. Support email is retained only as long as reasonably needed to resolve the request and meet those obligations. Provider backups and security logs may persist for their configured retention windows before aging out.

Email support@footon.dev to request access, correction, export, or deletion of personal information. Footon will verify the request and honor it where applicable law requires, subject to security, accounting, dispute, and legal retention duties.

Your responsibility

Do not publish information you do not have permission to share. Review the exact draft before publishing it. Public shares are unlisted, not private: anyone with the URL can read an active public share. Private shares require authentication and named access.

Contact

For private privacy questions or requests, email support@footon.dev. Do not put private information in a public GitHub issue.