Privacy

MEDIA CRAFT LLC, 1001 South Main Suite 700, Kalispell, MT 59901.

Your planner stays on your device

Planner PDFs are read, dated, and linked in your browser. They are not uploaded to Folory. Projects, including the PDF bytes, stay in this browser’s IndexedDB. Clearing site data deletes them. Folory cannot restore a file it never received.

Payments

Stripe processes payments. Stripe receives the email, card details, and billing information you enter on Stripe’s checkout page. Folory does not see or store your card number. Stripe’s own privacy notice describes that processing.

Accounts

If sign-in is turned on, Firebase Authentication handles Google sign-in and the passwordless email link. Firebase sends that email. The browser receives a Firebase ID token. Folory’s server checks the token against Google’s public keys and, when a purchase matches the account, stores the Firebase user id next to the email and order id in Cloudflare KV. Signing in on another device with the same email restores Pro. Guest checkout still works. It attaches to the account when you later sign in with the email you paid with.

What Folory stores

When a checkout is paid, the license function stores the checkout session id, the email Stripe returns, the plan, and the Stripe customer and subscription ids when Stripe provides them. That record lives in Cloudflare KV under the LICENSES binding. A signed license token is also saved in localStorage on your device so this browser remembers Pro. The token is not your PDF.

Email-list addresses, if you join the Folory letter, are stored in the same KV namespace, or, if KV is not bound, your email app opens a message to [email protected] instead of storing the address.

Restore attempts are counted by IP address in KV so the restore endpoint can be rate-limited. The counter expires after the window and is not used for marketing.

Hosting logs

Cloudflare hosts the site and may log IP address, user agent, and request URLs as part of operating the network. Folory does not add a third-party analytics script. Fonts are bundled with the app.

GDPR and UK GDPR

If those laws apply to you, you can ask to access, correct, delete, or restrict the personal data we hold, and you can ask for a copy of the license record. You can object to processing based on legitimate interests. You can complain to your supervisory authority. Email [email protected] with the address you used at checkout and, if you have it, the order id. We use the license record to provide Pro, count founder seats, and handle refunds. That is the contract and, for security logs, a legitimate interest in keeping the service reliable.

CCPA

If the CCPA applies, you can ask what personal information we hold, ask us to delete or correct it, and you will not be discriminated against for asking. Folory does not sell personal information and does not share it for cross-context behavioral advertising.

How long

License records are kept while the license is active and for a period after that so we can handle refunds, chargebacks, and seat counts. Email-list addresses are kept until you ask us to delete them. Ask [email protected] and we will delete what we are not required to retain.