Privacy notice

This notice says what 10RackMaker keeps about you, why it is kept, who can see it, and how to have it removed.

What is kept

• Your account. The email address you sign in with, your name, whether the email address has been confirmed, whether your account is an administrator, whether it is suspended, and when it was created.
• How you sign in. A one-way hash of your password — never the password itself, and it cannot be read back. If Google sign-in is switched on, the Google account identifier that comes with it.
• Your designs and revisions. The numbers and settings of each design, its title and folder, the revisions you save with every Save, a small preview image, and which versions you have exported. Revisions are never pruned automatically.
• Sign-in events. Every sign-in attempt, successful or not: the time, the method, whether it worked, and for a failure the reason. Each one also records the email address that was tried, the IP address the request came from, and the browser and device description your browser sends. This is a record of who tried to get in, kept so that a break-in attempt can be seen and investigated.
• An audit log. An append-only record of actions taken in the service: who did what, when, to which account, design, folder, plan or document. Every change an administrator makes — deleting, restoring, purging, editing an account, resetting a password — is in it, with the reason, and it carries the IP address and browser description of the person acting. It holds identifiers, labels and counts — never a password, a sign-in token or the contents of a design.
• Billing records. The billing country you chose, checkouts you started, the plan terms and export credits on your account, and the payments recorded against you. Card numbers are never typed into this site and are never stored here. A few product events (which page was viewed, which plan was clicked) are kept without any payment details.

Why it is kept

• To run your account, sign you in and save your work.
• To keep the service secure: to spot repeated failed sign-ins, blocked accounts and other misuse of the service.
• To be able to investigate what happened if something goes wrong, and to answer you when you ask.
• To keep correct records of what was bought and what it entitled you to.

Who can see it

You can see your own designs, your Deleted History and your account. Administrators of 10RackMaker can see account records, designs, deleted items, sign-in events and the audit log, in order to support people and investigate misuse. An administrator cannot see your password. Every change an administrator makes is itself written into the audit log — who made it, what changed, and why. We do not sell your data, and we do not use it for advertising.

Deleting: what “delete” really means here

This system deletes softly, and you should know that before you rely on a delete. When you delete a design or a folder, it disappears from your library straight away, but it is not destroyed at that moment.

• First a complete copy is written into a Delete Database — for a design, the design and every revision it has; for a folder, the folder itself — exactly as it was. Then the live row is marked deleted.
• You can put a deleted design or folder back yourself from your Deleted History for as long as it has not been archived or purged.
• An administrator can see deleted items in the Delete Database, restore them, move them into a long-term archive file, or purge them permanently.
• A purge is the only destructive act in the system. It destroys the stored content for good: the copy in the Delete Database, or the entry inside the archive file. What stays is the fact that the item existed, who purged it, when, and why — written in the audit log. Once purged, the content cannot be brought back.
• Deleting an account works the same way: the account record and its related rows are copied into the Delete Database, the account is marked deleted and suspended, and any signed-in sessions are ended. The person’s designs stay until they ask for those to be removed too.

How long is it kept? There is no automatic timer. Nothing is purged on a schedule, and no design, revision, sign-in event or log entry is deleted automatically. Deleted content stays in the Delete Database, or in an archive file if an administrator has moved it there, until someone purges it. Ask us and we will arrange it.

What cannot be removed yet. A purge destroys the snapshot, but the account row itself stays: designs and log entries still refer to it. Removing or anonymising a deleted account completely is unfinished work that must be done before public launch. If you ask us to erase your account, we will tell you exactly what can and cannot be removed at that point rather than promise more than the system can do.

Who else handles it

• Hosting. The site and its database run on a server rented from a hosting provider. That provider holds the machine they run on; it does not use your data for anything else.
• Email.Messages from 10RackMaker — an invite, a password reset link, a receipt — are sent through the project’s own mailbox, using the mail provider that serves it. That provider carries the message and the address it is sent to.
• Not in use yet. Google sign-in is not switched on. The code exists, but no Google button is offered and no Google account data is received. Paddle, which would act as the Merchant of Record for card payments, is not taking real payments yet: checkout runs in test mode, with no payment provider live behind it. No other third-party analytics, advertising or tracking service is used on this site.

Asking to see, correct, export or delete your data

Ask us and we will deal with it. You can ask for a copy of what is held about your account, ask for your account record to be corrected, ask for your designs and revisions in a file, or ask for a design, a folder or your whole account to be deleted and then purged permanently. Your own designs can also be exported from the library at any time, and you can restore or delete them yourself.

Write to noreply@10rackmaker.com with what you want. We may ask you to confirm from the address on the account, so that nobody else can ask for your data or have it deleted.