Account privacy

AGWitzel is operated by Pepe Witzel. For account and privacy questions, contact pepe.witzel@gmx.de.

What is stored

Accounts store your email, a password hash, verification status, sessions and optional news preferences. Authenticator secrets are encrypted by the authentication library. Essential secure cookies keep you signed in. The public markets do not require an account.

Optional news

News requires separate, confirmed consent. You can withdraw consent in account settings or through a link in every digest. Unsubscribing does not stop verification or password-reset emails. Resend processes email delivery when configured; Sites and its Cloudflare infrastructure host the website and account database.

Activity and operational records

Signed-in visits to visible account and market pages are counted once per UTC day. There is no individual article-reading history. Daily activity is retained for up to 366 days and security audit records for 180 days, with cleanup run by the scheduler. Delivery and consent records support operation and consent history. Failed-delivery addresses are stored as hashes for suppression.

Deleting an account

You can delete your account in settings with your password and explicit confirmation. This removes sessions, preferences, authenticator data and identifiable activity. Operational and consent events are retained without your account identifier; bounced or complained-about address hashes may remain to prevent further unwanted delivery. Ask the founder to review or remove retained records where appropriate.