Privacy notice

This service issues and manages potluckdb license keys. Contact: licensing@potluckdb.com.

What is stored

• Email addresses of seat holders and licence administrators.
• Email addresses that have verified a sign-in code, with the verification time.
• Seat assignments with timestamps.
• The change log of licence mutations.
• Sign-in challenges and sessions, stored as hashes.
• Client IP addresses in rate-limit counters, stored as HMACs and deleted within 24 hours.

Why

To issue and manage licence keys, and to keep sign-in working.

Where

With Cloudflare (this service and its database) and Google Workspace (sending mail). Copies of sent mail are kept by Google Workspace under its own retention.

How long

Assignments and the change log are kept for the life of the licence plus 6 years. Challenges and sessions are deleted within 24 hours of expiry. Rate-limit counters are deleted within 24 hours. Verified addresses that are no longer an administrator or a seat holder on any licence are deleted 30 days after last verification. Weekly database backups are deleted after 90 days.