Privacy Policy

Last updated: March 15, 2026

This policy describes how Contacts (https://contacts.scc.im) collects, uses, and protects your information.

1. Data We Collect

We collect only what is necessary to provide the service:

• Account information: username, email address (optional), and a securely hashed password.
• Contact data: vCard records you create, import, or sync to the service.
• Billing information: processed and stored by Stripe. We do not store your credit card number.
• Server logs: IP address, request timestamps, and user agent strings. Logs are retained for a limited period for security and debugging purposes.

2. Data We Do NOT Collect

• No analytics or tracking scripts.
• No device fingerprinting.
• No advertising identifiers.
• No third-party cookies or tracking pixels.
• No usage telemetry.

3. How We Use Your Data

• To authenticate you and provide CardDAV sync.
• To process subscription payments via Stripe.
• To send essential service communications (if email is provided).

We will never sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

The only third-party service that receives your data is:

• Stripe — for payment processing. Stripe receives your email and payment details. See Stripe's Privacy Policy.

5. Cookies

We use a single session cookie to keep you logged in. No tracking or analytics cookies are used. See our Cookie Policy for details.

6. Data Security

• Passwords are hashed with bcrypt (never stored in plain text).
• All connections are encrypted via HTTPS/TLS.
• CardDAV authentication uses HTTP Basic Auth over TLS.

7. Data Retention

• Your data is retained as long as your account is active.
• You can delete individual contacts, entire addressbooks, or export all your data at any time.
• If you wish to have your account and all associated data deleted, contact us.

8. Your Rights

You have the right to:

• Access your data — all contacts are visible in the web UI and via CardDAV sync.
• Export your data — in vCard (.vcf), CSV, or JSON format.
• Delete your data — remove contacts and addressbooks through the web UI.
• Rectify your data — edit any contact directly.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

For privacy-related questions, contact us at support@scc.im.