Privacy

ai-findings is run by Laurynas Počiūnas, a sole trader in Lithuania. This page describes what the site collects and why. It is short because the site collects little.

Questions, or a request about your data:info@findings.lt.

What is collected

When you create an account: your email address, and your name and profile picture if you sign in with Google. If you set a password, only a salted hash of it is stored — never the password itself.

When you buy a finding: a record of which finding, the amount, the currency, and the Stripe identifiers for the payment. Card details never reach this site. They are entered on Stripe's own payment page and are never seen or stored here.

When you sign in or ask for a password reset: your IP address is used to count attempts, so the login form cannot be used to guess passwords. Those counters are deleted automatically once the minute they cover has passed.

What is not collected

There is no analytics, no advertising pixel, and no third-party tracking of any kind. Nothing here profiles you, and nothing is sold or shared for marketing. You will not receive marketing email, because no marketing list exists.

Cookies

Two cookies, both strictly necessary, which is why this site has no cookie banner:

• A sign-in cookie that keeps you logged in for seven days. It is HttpOnly, so scripts cannot read it.
• A short-lived cookie during Google sign-in that protects the sign-in against being hijacked. It expires after ten minutes.

Who else processes it

• Cloudflare — hosting and the database, which is stored in the EU.
• Stripe — payments. Stripe receives your card details directly and acts as its own controller for them.
• Resend — sends the confirmation and password-reset emails.
• Google — only if you choose to sign in with Google, which shares your email, name and profile picture with this site.

Why it is allowed

Your account and purchase data are processed to perform the contract between us — you cannot be given access to something you bought without a record of it. The rate-limit counters exist for the legitimate interest of keeping accounts from being broken into.

How long it is kept

Your account is kept until you ask for it to be deleted. Records of purchases are kept for as long as Lithuanian accounting and tax law requires them to be, which is longer than the account itself. Rate-limit counters last about a minute.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for your account and data to be deleted. Emailinfo@findings.lt and it will be done. Deleting your account removes your access to anything you have bought.

If you think your data has been handled wrongly, you can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).