This pre-launch notice describes the account and site-security information used by the current AlienFunded website. The legal operator and applicable jurisdiction have not yet been identified on this site, so this notice is not a substitute for a complete, jurisdiction-specific privacy statement.
When you register or sign in, we store your email address, account status, verification and account timestamps, and hashed authentication-session records in Cloudflare D1. One-time email-code verifiers are stored only as keyed hashes and expire after ten minutes. Browser sessions expire after 30 days and can be revoked when you sign out or when an account is suspended.
New account registration collects your legal name, country of residence and phone number, in addition to your email. They are stored with your account in Cloudflare D1 and visible to you in your signed-in account and to authorised administrators. The phone number is not verified by SMS. These details are collected for account records and possible future onboarding only; no identity-document collection, KYC provider or financial onboarding process is connected. Do not submit information that is not requested.
When an account is created, the site stores the versions and time of your acknowledgement of these website terms, privacy notice and risk notice, together with the IP address observed by the site. This record is restricted to authorised administrator access and is retained as an account audit record. Reading or accepting these notices does not create a financial-service agreement.
When a page loads, the site records the page path without query strings, IP address, approximate country supplied by Cloudflare, browser user-agent, a session-scoped anonymous identifier, and a limited device signal derived from browser and display settings. If you are signed in, this activity can be associated with your account. Normally, records older than 30 days are removed on site activity or administrator data access; if the site is idle, cleanup occurs at the next such request. Records linked to an email-confirmed account-deletion request are retained during the 90-day period and removed with the account.
Optional analytics are off unless you choose “Allow optional analytics.” Choosing “Essential only” keeps them off; until you choose, your preference is recorded as unset. Only opted-in page views are included in analytics totals. Your choice is stored in a first-party cookie for one year and can be changed using Privacy settings on any public page. Essential security logging remains on regardless of that optional analytics choice.
To request deletion, sign in, open Help → Account security, type DELETE and ask for a confirmation email. Nothing is scheduled until you open its one-time confirmation link within 24 hours. After you confirm, your account profile, recorded legal acceptances and any account-linked visitor-security records that remain are kept for 90 days. You can cancel at any time during that period by signing in and choosing Cancel deletion. If not cancelled, a daily scheduled process permanently deletes your account and linked records after at least 90 days; the purge runs at 03:00 UTC and may occur at the next scheduled run after the 90-day date. Separate visitor-security events that are not linked to your account follow the published 30-day retention period. Account deletion cannot be undone after completion.
The support email address that sends sign-in codes is not confirmed for incoming messages, and a verified privacy contact has not yet been published. Do not send passwords, sign-in codes, banking details, or identity documents by email. This self-service deletion process is limited to website accounts and does not replace applicable privacy rights. The operator must publish a working privacy contact, rights-request process and jurisdiction-specific retention schedule before offering financial services.