Privacy Policy

Effective: February 26, 2026

1. Information We Collect

FuelSignal ("we," "us," "our") collects minimal information necessary to operate the platform:

• Access codes: When you log in, we record the access code used, your IP address, and browser user-agent for security and abuse prevention.
• Session data: We use encrypted session cookies to maintain your authenticated state. These cookies are marked Secure, HttpOnly, and SameSite=Lax.
• Analytics: We use Google Analytics to understand aggregate usage patterns (page views, session duration, device type). Google Analytics may set its own cookies subject to Google's Privacy Policy.

2. How We Use Your Information

• To authenticate your access to the platform
• To detect and prevent unauthorized access or abuse
• To understand how the platform is used so we can improve it

3. Information We Do Not Collect

We do not collect names, email addresses, payment information, or any personally identifiable information beyond IP addresses and user-agent strings logged at authentication.

4. Data Sharing

We do not sell, rent, or share your information with third parties except:

• Google Analytics (aggregate, anonymized usage data)
• When required by law or to protect our rights

5. Data Retention

Login logs are retained for 90 days for security monitoring, then deleted. Session cookies expire when you close your browser or log out.

6. Security

All data is transmitted over HTTPS with TLS 1.2+. Session cookies are encrypted, marked Secure and HttpOnly, and restricted to SameSite=Lax. We implement HSTS, Content Security Policy, and standard security headers.

7. Your Rights

You may request deletion of any login logs associated with your IP address by contacting us at [email protected].

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact

For questions about this privacy policy, contact [email protected].