Alca Labs

Privacy Policy

Last updated 7 September 2026

This covers the Alca account itself — the login you use across Alca products — and this dashboard. Each product describes separately what it stores about your use of that product.

What the account holds

Your email address, and a password if you set one. The password is hashed by our authentication provider; we never see it and cannot recover it. If you sign in with Google we receive your email address and basic profile details from Google, and nothing more.

That is the whole account. We do not ask for your name, your school, your phone number, or a payment card in order to create one.

What this dashboard shows

Your subscription status, licence and registered devices for Alca products you use. That information is held by our own licensing service, not by this page — the dashboard asks it on your behalf each time you open it, and stores nothing of its own.

Who else sees any of it

We use a small number of processors, and only these:

• Supabase — authentication. Holds your email and password hash, and issues your session.
• Vercel — hosting and standard server request logs.
• Cloudflare — a bot check on the sign-in and sign-up form. It confirms a real browser is submitting it and sees only what it needs for that.
• Sentry — error reports, so we find out when something breaks instead of waiting to be told. Reports carry technical details and an anonymous account identifier; we strip your email address, your IP address, and any credentials before sending. No session recording or replay.
• Stripe — payment, if you subscribe to a paid product. You enter your card on Stripe’s own page; we never see or store card numbers.

We do not sell your data, and we do not share it with advertisers.

Website measurement

We use cookieless Vercel Web Analytics on signup, sign-in, and sift setup pages to measure page views and progress through checkout and setup. Events contain fixed step names, not your email, license key, form contents, or URL query strings. There are no advertising pixels or session recordings. Authentication cookies keep you signed in. The sift Mac app has no analytics.

Deleting your account

Email erikyaspelin@gmail.com from the address on the account and we will delete it. To be straightforward about it: there is not yet a button here that does this for you, so it is a request handled by a person rather than something instant. Deleting the Alca account removes the login; data held by an individual product is covered by that product’s own policy.

Changes

If this policy changes in a way that affects what we collect or who receives it, we will update the date above. Alca Labs is based in the United States, and the services above process data there.

Contact

Questions about any of this go to erikyaspelin@gmail.com.