Privacy Policy

This policy describes what Trismea records about you, why, and what you can do about it. It is written to be read rather than to be defensible, and every claim in it is a claim about how the software is actually built.

Who is responsible

Trismea LTD ("Trismea", "we") is the controller of the personal data described here. Registered address: [REGISTERED ADDRESS]. For any question about this policy, or to make any of the requests described under Your rights, write to support@trismea.com.

What we collect

What you give us to open an account

• Your name and email address.
• A password, stored only as a one-way hash — we cannot read it and cannot recover it for you.
• If you switch on two-factor authentication, the secret your authenticator app shares with us and your unused backup codes.
• Your time zone and your working preferences — which house system, which table of terms, which triplicity rulers you read charts under.

What you create while using it

Charts, elections, rites, talismans, sigils, saved locations and entries in the magical record, together with the frozen sky stored alongside each one. This is your material. We do not read it, mine it, train anything on it, or show it to anybody else.

Some of it is encrypted in the database and is not legible to anyone holding a copy of the database alone: the intent, body and outcome notes of every record entry; the title, body and steps of every rite; and the name and notes on every chart. The choice of what to encrypt is deliberate and it is not everything — the time, the place, the type of working and the tags stay readable, because those are what your own analytics page counts, and a column the server cannot read is a column it cannot count. The line is between that you did a working and what the working was.

What the server records by itself

• Ordinary web-server logs, which include IP addresses, timestamps and the pages requested. They exist to diagnose faults and to detect abuse, are kept for a short period, and are never used to build a profile of you.
• A session cookie, which is what keeps you signed in, and — only if you ask for it — a "remember me" cookie. There are no analytics, advertising or tracking cookies on any page, because there is no analytics or advertising script on any page. Fonts are served from our own server rather than from a font network, so loading a page does not announce your visit to a third party.
• A lesson in the Academy may include a video hosted on Vimeo or YouTube. Opening the lesson requests nothing from either; the page shows a plate with a play button, and only pressing play loads the provider's player, at which point that provider's own privacy policy applies to what it records. We use each provider's do-not-track player address. Pictures in lessons are stored and served by us.

What we deliberately do not collect

Location search runs against a copy of the GeoNames gazetteer held on our own server. Typing the name of the town you live in does not send that name to a geocoding service, which is exactly what most software does on every keystroke.

Why we are allowed to hold it

• To provide the service you asked for — performance of our contract with you. This covers your account, your material and the email we must send you about it.
• To take payment — performance of that contract, and compliance with tax and accounting law for the records we must keep afterwards.
• To keep the service running and secure — our legitimate interest in diagnosing faults and preventing abuse. This is what the server logs are for and it is all they are for.

Who else sees it

We do not sell personal data, and we do not share it for advertising. Three companies process data on our behalf, each for one job:

• Stripe — subscription payments. Card details are entered on Stripe's own checkout and never reach our servers; we hold only a customer reference, the subscription's status, and the last four digits and brand of the card for your receipts.
• Postmark — transactional email: confirmations, password resets, receipts and account notices. No marketing mail is sent from here.
• Hetzner Online GmbH — hosting. The application, its database and its ephemeris all run on a single dedicated server in Helsinki, Finland.

Stripe and Postmark are established in the United States, so using Trismea involves transferring some data there. Both are engaged under contractual terms that include the European Commission's Standard Contractual Clauses.

We will also disclose data where a law compels it. If we are permitted to tell you first, we will.

How long we keep it

Your account and everything in it are kept for as long as the account exists. Delete your account and the material goes with it, within thirty days including backups. Records of payments are kept for as long as tax law requires, which is longer, and cannot be deleted on request.

A lapsed subscription is not a deletion. If you stop paying, your account becomes read-only rather than closed: everything you wrote stays here to read and to export, because locking somebody out of their own diary because a card expired is a different act from ending a subscription.

Your rights

You may ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to what we do with it, and to receive it in a portable form. Write to support@trismea.com and we will answer within one month.

You do not have to ask us for the export. Everything you have written is downloadable as Markdown or JSON from inside the application, at any time, and those pages stay open even when a subscription has lapsed. If you are in the UK, the EU, Brazil or another jurisdiction with a data-protection authority, you also have the right to complain to it.

Children

Trismea is not intended for anybody under 16, and accounts are not knowingly created for them.

Changes

When this policy changes, the date at the top of this page changes with it. A change that genuinely alters the bargain will be told to you by email rather than left for you to notice.