Privacy

This page describes the prototype on xykonto.com. A server-backed production build will replace the storage notes below.

What this prototype stores

Name, email, a SHA-256 password hash, trial start time, and plan flag live in your browser (localStorage). Clearing site data deletes the local account. That is a demo limitation, not a privacy feature to rely on.

What we intend to store in production

• Account email, hashed password (Argon2id), trial clock, plan, PayPal receipt ids
• Journal rows, session notes, playbook rules, psychology flags you type
• Grok prompts and completions tied to your ledger, so reviews stay grounded

What we will not store

• Broker passwords
• Card PAN data — PayPal holds the charge

Cookies and analytics

The static pages do not set a tracking pixel. Session state is local. If analytics are added later, this page will name the vendor.

Contact

Questions: GitHub @MasBen71. Last updated 29 September 2026.