Legal draft — GDPR
Privacy notice
DRAFT. Intended processing for accounts, billing and support.
Draft. Controller identity and retention schedules need OWNER_INPUT. See docs/compliance/GDPR_CHECKLIST.md.
- Account email, password hash, session tokens
- Subscription/billing metadata (no full card data)
- Support tickets and risk acknowledgements
EA passwords, OTPs and EA session cookies are not collected for cloud storage.
Cookies: Cookies.