Privacy Policy
How we protect your digital sovereignty, preserve user privacy, and operate without tracking ads.
Last Updated: August 24, 2026
No programmatic ad networks, tracking pixels, or cross-site data brokers.
We do not monetize, rent, or sell your email address or personal identity.
Self-serve 1-click account deletion and complete data removal anytime.
Information We Collect
We collect only the minimal information necessary to deliver a secure reading and publishing experience:
- Account Profile: When you register, we store your name, email address, chosen handle (
@username), bio, and optional avatar URL. - Security & Authentication: We store cryptographically hashed passwords (using bcrypt) and SHA-256 hashed API tokens. We never store plain-text passwords or secret keys.
- Payment Data: Payment details (credit cards, billing address) are processed directly by our Merchant of Record, Creem.io, in compliance with PCI-DSS standards. Lokha never stores or receives your raw financial card details.
How We Use Your Data
We use your information exclusively to:
- Authenticate your login and manage your active sessions.
- Provide access to members-only essays and the author writing studio.
- Send transactional notifications (magic login links, receipt confirmations, epoch election alerts).
- Display your author byline on stories you choose to publish publicly.
Cookies & Local Storage
Lokha uses only strictly essential first-party cookies (lokha_session) configured with HttpOnly, Secure, and SameSite=Lax security flags to maintain your authenticated login session. We do not use advertising or third-party tracking cookies.
Your Rights (GDPR, CCPA & Digital Sovereignty)
Regardless of your geographic location, you enjoy the following privacy rights:
- Right to Access: View all your profile details and publication history in the Dashboard.
- Right to Rectification: Edit your name, bio, avatar, and handle at any time via Settings.
- Right to Erasure (Self-Serve Deletion): Delete your entire account and all associated data in 1 click under the Danger Zone in Account Settings.
Security & Global Edge Hosting
Lokha runs on Cloudflare Workers and global edge compute with end-to-end TLS 1.3 encryption. Database records are stored in high-resiliency encrypted storage with continuous automated backups.
Data Protection Inquiries
To request data export or ask privacy-related questions, reach out to our privacy desk.