albertlane.net · Roadmap

Data retention policy

Version 1 · effective October 31, 2026 (Pacific Time) · applies to albertlane.net and portal.albertlane.net.

Short version

We keep financial and audit records so they can be checked later. You can export your own data at any time. You can delete your settings, browsing history and ordinary messages yourself. We never sell data.

What we keep, and for how long

RecordWhat it holdsHow longCan you delete it?
AccountName, email, password hash (never the password), statusWhile the account is open; closed accounts are disabled, not erased, so records stay linkedAsk Albert to close it
Invoices, receipts, payment stepsAmounts, dates, method, reference, SHA-256 fingerprintAt least 7 years, for tax and accountingNo. Hidden from your mailbox on request, but kept
Crypto recordsAsset, network, amount, transaction hash, wallet label you typed. Never keys or seed phrasesAt least 7 years. Mistakes are marked void, never editedNo, but they can be voided
AI usage receiptsModel, tokens, time, cost, byte counts and fingerprints. Not the text of your questionAt least 7 yearsNo
Settings and personalizationYour display choicesUntil you change or delete themYes, from your account page
Browsing history inside the portalWhich account pages you opened, and whenUntil you delete itYes, from your account page
Portal mailbox messagesMessages between you and AlbertUntil you delete them (financial notices are kept)Yes, ordinary messages
Sign-in sessionsA hashed session token8 hoursLog out ends it
Security logsIP address, network and country for sign-ins, failed attempts and probes of closed pathsKept for security reviewNo
Published research and evidence filesPublic documents with SHA-256Kept permanently, unalteredNot applicable

How records are protected

Financial and audit records are append-only and hash-chained, so a changed or removed entry is detectable. Exports carry a SHA-256 fingerprint. Data is stored with Cloudflare (Workers, D1 and Durable Objects).

Your rights

Export everything in your account as JSON from the account page. Ask questions through your portal mailbox. This policy is a plain statement of current practice. It is not a certification or a legal guarantee, and it will be updated here if practice changes.