We store account email, an Argon2id password hash, sessions, saved research objects, billing identifiers, and security events needed to operate and protect the service. We do not sell personal information. Stripe processes payment details; Draconitic does not store full card numbers. You can permanently delete your account from the Account page; minimal non-identifying billing tombstones and security records may be retained for fraud prevention, webhook safety, and legal obligations. Contact [email protected] for privacy requests or help.