Privacy Policy
Effective date: August 28, 2026
Tactics Journal (“we”, “us”, “our”) operates tacticsjournal.com. This policy explains what we collect about you, what we do with it, and how we protect it.
Information we collect
Email address
When you subscribe or create an account, we collect your email address. We use your email to:
- Send you newsletter posts when you subscribe
- Send sign-in links and one-time codes for account access
- Send account-related notifications
Account data
If you create an account, we store:
- Your email address
- Session information for keeping you signed in
If you sign in with Google, Google sends us your email address and basic profile information (name, profile picture) through the OpenID Connect email and profile scopes. We keep only your email address.
Community data
If you use Community features (Chat, Discussion, Feed, comments, profiles), we also collect and store:
- Profile information you provide: display name, title, bio, website URL, avatar image, and banner image
- Content you post: chat messages, discussion posts, replies, and article comments, including any attached images
- Home sources you configure: RSS/Atom/YouTube URLs you add to Community Home
- Reports you file against content or members
- Moderation records: if we act on your content or account, we log what we did and why
Anyone can see your profile information and posts. We store uploaded images (avatars, banners, message attachments) in Cloudflare R2 and serve them from public URLs. When you delete a message or post, we take it out of public view, though we may keep the underlying record in our moderation logs. When you upload a new avatar or banner, we delete the old image from storage.
Board account data
If you use Board cloud backup or Pro, we store the project documents you sync to your account. Pro also keeps up to 30 periodic earlier versions of each synced project so you can restore one. When an agent link proposes a version instead of editing your project, we store that proposed document until you accept or reject it; a decided proposal keeps only its outcome. We store synced custom assets and library items, sharing and invitation records, and revocable agent-access grants when you use those features. Browser-local projects that you do not back up or sync stay on your device.
Paid product billing
Tactics Journal Pro is sold through Polar, our payment processor and merchant of record. Board License is closed to new sales, but Polar continues to handle existing License subscriptions. Polar handles payment details, so we do not store your full card number. We receive the account and subscription details needed to match a purchase to your account, grant or remove paid access, handle renewals, cancellations, refunds, chargebacks, and failed payments, and send billing and service notices.
Board product counters
The Board sends a small set of first-party product counters so we can understand editor use, exports, pricing views, checkout starts, and free-backup use. Historical event and plan categories, including retired trials and Board License, may remain in aggregate records. We store only an aggregate count for the UTC day, event type, approved detail, and plan category (Free, Board License, Pro, or self-hosted).
We do not store an IP address, user agent, cookies, email address, account ID, installation ID, raw URL, referrer, or arbitrary event text with these counters. We keep the aggregate rows for 14 months, then delete them.
Pro is $14.99 billed monthly or $12.99 a month billed yearly at $155.88 and renews automatically until canceled. The browser-local Board editor is free, including unlimited local projects and exports. Signed-in Free accounts may select one project for cloud backup. Existing Board License subscriptions continue under their original purchase terms, but no new License is sold. You do not need Pro to read Opinion or Research, or to use free Opinion, Research, or Community features and public pages.
Third-party services
We use the services below. Each link goes to that company’s own privacy policy.
- Buttondown. Newsletter delivery and subscriber management. Buttondown’s privacy policy
- Resend. Transactional email, meaning sign-in links, one-time codes, and account notifications. Resend’s privacy policy
- Google. Optional “Continue with Google” sign-in through Google Identity Services and OAuth 2.0. We ask for the
openid email profilescopes and nothing else, and we reach no other data in your Google account. Google’s privacy policy - Cloudflare. Site hosting, edge computing, and database services (D1). Cloudflare’s privacy policy
- Polar. Payment processing and merchant-of-record services for Tactics Journal Pro and existing Board License subscriptions. Polar’s privacy policy applies to billing information handled by Polar. Polar’s privacy policy
We do not use any third-party analytics or tracking services.
Cookies
This site uses essential cookies only. We set no advertising, analytics, or third-party tracking cookies. Here is every cookie we do set:
| Cookie | Purpose | Duration |
|---|---|---|
tj_session |
Signs you in and keeps you signed in after you sign in via a sign-in link, one-time code, or Google. HttpOnly, Secure, SameSite=Lax. | Up to 30 days |
tj_google_oauth |
Guards the Google sign-in redirect against CSRF. HttpOnly, Secure, SameSite=Lax. | 10 minutes (cleared after sign-in completes) |
cookie-notice-dismissed |
Remembers that you have seen the cookie notice so we do not show it again. | 90 days |
For the full detail, see our Cookie Policy.
Data retention
- Newsletter subscribers. New subscriptions receive every new post by email. Existing preferences stay unchanged. We keep your email while you stay subscribed. Unsubscribe at any time using the link in any email.
- Account data. We keep it while your account is active. Contact us to have it deleted.
- Community data. We keep your posts, messages, and profile information while your account is active, or while the content stays publicly visible. We may keep deleted content in our moderation logs. Contact us to have your account, Community content, and uploaded images deleted in full.
Your rights
You may at any time:
- Unsubscribe from newsletters using the link in any email
- Sign out of your account to clear your session
- Request access, correction, or deletion of your account and data by contacting us at our contact page
Children’s privacy
This site is not meant for children under 13, and we do not knowingly collect personal information from them. If you think a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We post any change on this page and update the effective date.
Contact
If you have questions about this policy, reach us through our contact page.