Privacy Policy

1. Information We Collect

PROTOCOL is designed with privacy as a core principle. We collect only the minimum information necessary to provide our service:

• Username: Your chosen identifier (hashed and salted)
• Authentication credentials: Password (hashed with PBKDF2-SHA256) or passkey
• Session data: For maintaining your login across devices
• Usage data: Minimal anonymized metrics for service improvement

We do NOT collect: Email addresses, phone numbers, real names, or any personally identifiable information unless you explicitly provide it.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Authenticate your identity and secure your account
• Prevent fraud and abuse
• Respond to your requests and support inquiries
• Comply with legal obligations

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data encrypted at rest and in transit using TLS 1.3
• Password security: PBKDF2-SHA256 with per-user random salts
• WebAuthn/Passkeys: Support for hardware security keys and biometrics
• Zero-knowledge architecture: We cannot access your plaintext passwords
• Regular security audits: Continuous monitoring and improvement

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:

• With your explicit consent
• To comply with legal obligations or valid legal requests
• To protect our rights, privacy, safety, or property
• With service providers under strict confidentiality agreements (e.g., hosting infrastructure)

5. Data Retention

We retain your data only as long as necessary to provide our services or as required by law. You can request deletion of your account and associated data at any time through your account settings.

6. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or analytics that identify individual users. All analytics are aggregated and anonymized.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Withdraw consent for data processing
• Object to processing of your data

8. Children's Privacy

PROTOCOL is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Users

Your information may be transferred to and processed in countries other than your own. By using PROTOCOL, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through the appropriate channels within the application.