Freela

Data inventory

What we collect today, why, where it lives, how long we keep it, who processes it, and how it is deleted:

Admin email + password hash — Why: authenticate the owner dashboard. Where: SQLite on the host. Retention: until the account is removed. Processor: Freela (first party). Deletion: delete the admin_users row or wipe the database file.

Admin session token hash — Why: keep an authenticated session. Where: SQLite + httpOnly cookie. Retention: 12 hours. Processor: Freela. Deletion: logout or expiry deletes the session row.

Privacy-safe analytics events (tool id, locale, session UUID, success/error, path) — Why: understand which tools work and fail. Where: SQLite. Retention: until export or wipe. Processor: Freela, only with analytics consent. Deletion: wipe the events table or request deletion via email.

Preferred locale cookie — Why: remember language. Where: browser cookie and localStorage. Retention: 1 year. Processor: your device. Deletion: clear site data.

User files and pasted document contents — Why: run the selected tool. Where: browser memory only for LOCAL_ONLY tools. Retention: until the tab is closed or a new file is chosen. Processor: none (LOCAL_ONLY). Deletion: object URLs are revoked; memory is released on navigation.

Inventory questions: tools@freela.store.