Privacy policy

Short version: we store the minimum needed to run accounts and our services, and nothing else.

What is stored

• Black Candle accounts: your email address, a bcrypt hash of your password (never the password itself), email verification state, and session tokens. This is what signs you in across our products.
• Product data you create: whatever you put into our products — task lists in OpenMGMT, for example — stored so the service works. It is never sold, shared, or used for advertising.
• Operational logs: minimal server logs for debugging, rate limiting, and abuse prevention.

What is NOT collected

This website uses no third-party analytics, no advertising trackers, and no cross-site cookies. The only cookie is the functional session cookie that keeps you signed in.

Retention and deletion

Account data is kept while your account exists. Email us from your account address to request deletion of your account and its data, and we will confirm once it is done.

Contact

Questions: privacy@blackcandletech.com.