1. Information We Collect

1.4 Forensic Data Collection

For fraud prevention, abuse detection, and law enforcement cooperation, we may collect comprehensive forensic data with your explicit consent:

• Device Fingerprinting: Browser characteristics, hardware specifications, screen properties, timezone information, and installed fonts to create a unique device signature.
• Canvas & WebGL Fingerprinting: Rendering signatures and graphics capabilities that help identify unique device configurations.
• Audio Fingerprinting: Audio processing characteristics that create unique device signatures.
• Network Information: Connection type, speed, and local IP addresses (including those behind VPNs/proxies via WebRTC).
• Behavioral Biometrics: Mouse movement patterns, keystroke timing, scroll behavior, and interaction patterns for advanced fraud detection.
• Bot Detection: Analysis of browser inconsistencies, automation indicators, and suspicious behavior patterns.

This forensic data is used exclusively for security purposes and may be shared with law enforcement upon valid legal request. You can withdraw consent at any time, and we will stop collecting additional forensic data while retaining existing data for legitimate security purposes as outlined in our retention policy.

2. How We Use Information

• Provide, personalize, and maintain the Services, including generated portfolio instances.
• Authenticate users, prevent unauthorized access, and investigate suspicious activity or abuse.
• Process contact requests, deliver support, and send transactional or administrative communications.
• Monitor performance, debug issues, and improve infrastructure reliability and user experience.
• Comply with legal obligations, enforce agreements, and protect the rights, property, or safety of ptfl.io, our users, or third parties.
• Evaluate usage trends to inform product development, marketing strategies, and security posture.

3. How We Share Information

We do not sell personal information. We share data only with:

• Infrastructure partners: hosting providers such as Railway, AWS-compatible object storage, email gateways, and CDN networks required to deliver the Services.
• Professional advisors: auditors, legal counsel, or insurers who assist with compliance or risk management under confidentiality obligations.
• Law enforcement or regulators: when required by applicable law, subpoena, court order, or to protect vital interests and prevent harm.
• Successors: in the event of a merger, acquisition, or asset sale, provided the recipient agrees to respect this Privacy Policy or provides notice of material changes.

4. Cookies and Similar Technologies

We use essential cookies to authenticate sessions, remember preferences, and ensure site security. With your consent, we deploy optional analytics cookies to measure traffic, diagnose issues, and improve the user experience. You can adjust your cookie preferences at any time through the onsite cookie banner or by updating browser settings. See our Cookie Policy for details.

5. Data Retention

We retain personal information only for as long as needed to deliver the Services, comply with applicable law, and protect the platform. Unless a longer period is required to resolve disputes or investigate abuse, contact-form submissions and associated audit logs are retained for up to five (5) years. Authentication logs and session metadata follow the same schedule. We periodically review stored information and delete or anonymize data that is no longer required.

6. Your Rights & Choices

7. International Data Transfers

We operate globally, and your information may be processed in countries different from where you reside. We implement appropriate safeguards—such as standard contractual clauses—to protect personal data transferred across borders.

8. Children's Privacy

The Services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.

9. Changes to this Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. When we make material updates, we will revise the “Last Updated” date and provide additional notice if required. Continued use of the Services after changes take effect signifies acceptance of the revised policy.

10. Contact Us