Clay's Almanac · Legal Colophon
Last updated September 1, 2026
We collect the minimum we need to run accounts, billing, and a reasonably abuse-resistant site. This page lists what that actually is today, not a boilerplate wish list.
| Source | Data |
|---|---|
| Accounts | Email address, a hashed (never plaintext) password, and your assigned role(s) — free or subscriber. |
| Stripe | Your Stripe customer and subscription IDs. Your card details are handled entirely by Stripe and never reach our servers. |
| Cloudflare | We use Cloudflare's free tier for DDoS protection. It proxies requests to us and passes along request metadata, including your client IP address. |
| Rate limiting | IP addresses, used to enforce request limits and flag abuse. |
| Contact form | The name, email address, and message you submit, stored so we can reply. |
| Used to send magic-link sign-in emails and account/subscription alerts. |
Our codebase includes a data model for tracking active login sessions per device (session ID, IP address, user agent, and timestamps) and a configured limit of 3 concurrent devices per account, intended to support the no-account-sharing policy in our Terms of Use. In full transparency: as of this writing, that tracking is defined in our code but nothing currently writes to or reads from it — no per-device data is actually being collected or enforced today. We'll update this notice if and when that changes.
To create and secure your account, process payment and manage your subscription, respond to messages you send us, keep the site working under load and resistant to abuse, and email you things you've asked for (sign-in links, account notices). We don't sell your data, and we don't use it for advertising.
Stripe (payments), Cloudflare (network protection), and our email delivery provider each process the data described above as needed to do their job for us. We don't share your information with anyone else, except where required by law.
You can update or delete your account information, or ask us to delete your data outright, by contacting us. Cancelling a subscription stops future billing; we may retain minimal account records after that as required for tax, accounting, or fraud prevention.
We may update this policy as the site grows. Material changes will be reflected here with an updated "last updated" date.
Questions? Contact us. See also our Terms of Use.