Only the data needed to sign you in.

What is stored

Regime Labs stores your normalized email address, verification and login timestamps, hashed login challenges, and hashed session identifiers. Passwords, plaintext verification codes, raw session tokens, and raw IP addresses are not stored.

Why it is used

Your email is used only to manage approved access, register your account, deliver requested login codes, maintain secure sessions, prevent abuse, and let you delete the account. It is not used for marketing.

Email delivery

Requested login messages are processed by Resend. A code expires after 10 minutes and can be used once. Resend may retain delivery records according to its service terms.

Sessions and retention

The secure login cookie expires after 30 days. Expired challenges, sessions, and rate-limit records are removed automatically. Your verified email remains until you delete the account. Administrators can store approved email addresses in the access whitelist and remove their access at any time.

Your controls

Log out to revoke the current browser session. Delete Account removes your member whitelist entry, account email, and all active sessions and clears this browser's saved stock history. The designated administrator’s access entry is retained to keep administration available. Authentication cookies are essential and are not used for advertising or analytics.