Last updated: 18 August 2026
This Privacy Policy explains how ESCADPT ("we", "us", or "our") collects, uses, stores, and protects personal information when you use our application and related services.
We are committed to protecting personal information and implementing appropriate technical and organisational security measures.
Depending on how you use the service, we may collect:
We collect only information reasonably necessary to provide and secure the service.
We use technical measures designed to reduce the risk of unauthorised access to personal information.
Certain personal information stored in our database is encrypted at rest, including:
Encrypted information is decrypted by the application only when required for legitimate application functionality.
Passwords are not stored in plaintext. Authentication passwords are handled using Django's password-hashing mechanisms.
Because encrypted email addresses cannot be efficiently searched or uniquely indexed in their encrypted form, we maintain a separate cryptographic lookup value.
The lookup value is generated from a normalised email address using HMAC-SHA-256 and a secret application key.
The lookup value does not contain the plaintext email address and is used to locate an account without requiring the database to store the email address in plaintext.
The lookup key is stored separately from the database.
Encryption keys and cryptographic lookup keys are maintained separately from the application's database.
Access to these keys is restricted to the application environment and authorised infrastructure.
A database copy obtained without the corresponding cryptographic keys should therefore not directly expose the encrypted personal information stored within it.
We may use personal information to:
If you use a third-party authentication provider, such as Google, that provider may provide us with account information necessary to authenticate and create your account.
We use information received from such providers for legitimate purposes connected with account authentication and operation of the service.
We retain personal information for as long as reasonably necessary to provide the service, maintain account functionality, satisfy legitimate operational requirements, and comply with applicable legal obligations.
Where information is no longer required, we will take reasonable steps to delete or anonymise it, subject to applicable legal and operational requirements.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction.
These measures include encryption of selected database fields, cryptographic lookup mechanisms, password hashing, access controls, and separation of cryptographic secrets from stored database data.
No method of electronic storage or transmission can guarantee absolute security. Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee that information will remain completely secure under every circumstance.
If we become aware of a personal-data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain, and remediate the incident and provide notifications where legally required.
Depending on your location and applicable law, you may have rights concerning your personal information, including rights to:
Requests can be made using the contact information provided below.
The service is not intended for children where applicable law prohibits their use of the service.
We do not knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.
We may update this Privacy Policy when our services, security practices, or legal obligations change.
The updated version will be made available through the service and will include an updated "Last updated" date.
For privacy-related questions or requests, please contact:
thespinninglogo@gmail.com
We use Google Analytics to understand how our service is used and to help us improve the application.
Analytics information is used for aggregated and statistical purposes. We do not use Google Analytics to monitor individual users' activity across other websites.
We cannot use our Google Analytics data to see what a particular person is doing on other websites, and we do not have access to an individual's browsing activity across the wider internet through our use of Google Analytics.
We use analytics to understand general usage patterns, such as which parts of the application are being used and how the service performs, rather than to personally monitor individual users.
E S C A D P T EST. 2015 © 2026 ESCADPT. All rights reserved.
