Privacy Policy

Effective date: August 28, 2026

Tactics Journal (“we”, “us”, “our”) operates tacticsjournal.com. This policy explains what we collect about you, what we do with it, and how we protect it.

Information we collect

Email address

When you subscribe or create an account, we collect your email address. We use your email to:

  • Send you newsletter posts when you subscribe
  • Send sign-in links and one-time codes for account access
  • Send account-related notifications

Account data

If you create an account, we store:

  • Your email address
  • Session information for keeping you signed in

If you sign in with Google, Google sends us your email address and basic profile information (name, profile picture) through the OpenID Connect email and profile scopes. We keep only your email address.

Community data

If you use Community features (Chat, Discussion, Feed, comments, profiles), we also collect and store:

  • Profile information you provide: display name, title, bio, website URL, avatar image, and banner image
  • Content you post: chat messages, discussion posts, replies, and article comments, including any attached images
  • Home sources you configure: RSS/Atom/YouTube URLs you add to Community Home
  • Reports you file against content or members
  • Moderation records: if we act on your content or account, we log what we did and why

Anyone can see your profile information and posts. We store uploaded images (avatars, banners, message attachments) in Cloudflare R2 and serve them from public URLs. When you delete a message or post, we take it out of public view, though we may keep the underlying record in our moderation logs. When you upload a new avatar or banner, we delete the old image from storage.

Board account data

If you use Board cloud backup or Pro, we store the project documents you sync to your account. Pro also keeps up to 30 periodic earlier versions of each synced project so you can restore one. When an agent link proposes a version instead of editing your project, we store that proposed document until you accept or reject it; a decided proposal keeps only its outcome. We store synced custom assets and library items, sharing and invitation records, and revocable agent-access grants when you use those features. Browser-local projects that you do not back up or sync stay on your device.

Tactics Journal Pro is sold through Polar, our payment processor and merchant of record. Board License is closed to new sales, but Polar continues to handle existing License subscriptions. Polar handles payment details, so we do not store your full card number. We receive the account and subscription details needed to match a purchase to your account, grant or remove paid access, handle renewals, cancellations, refunds, chargebacks, and failed payments, and send billing and service notices.

Board product counters

The Board sends a small set of first-party product counters so we can understand editor use, exports, pricing views, checkout starts, and free-backup use. Historical event and plan categories, including retired trials and Board License, may remain in aggregate records. We store only an aggregate count for the UTC day, event type, approved detail, and plan category (Free, Board License, Pro, or self-hosted).

We do not store an IP address, user agent, cookies, email address, account ID, installation ID, raw URL, referrer, or arbitrary event text with these counters. We keep the aggregate rows for 14 months, then delete them.

Pro is $14.99 billed monthly or $12.99 a month billed yearly at $155.88 and renews automatically until canceled. The browser-local Board editor is free, including unlimited local projects and exports. Signed-in Free accounts may select one project for cloud backup. Existing Board License subscriptions continue under their original purchase terms, but no new License is sold. You do not need Pro to read Opinion or Research, or to use free Opinion, Research, or Community features and public pages.

Third-party services

We use the services below. Each link goes to that company’s own privacy policy.

  • Buttondown. Newsletter delivery and subscriber management. Buttondown’s privacy policy
  • Resend. Transactional email, meaning sign-in links, one-time codes, and account notifications. Resend’s privacy policy
  • Google. Optional “Continue with Google” sign-in through Google Identity Services and OAuth 2.0. We ask for the openid email profile scopes and nothing else, and we reach no other data in your Google account. Google’s privacy policy
  • Cloudflare. Site hosting, edge computing, and database services (D1). Cloudflare’s privacy policy
  • Polar. Payment processing and merchant-of-record services for Tactics Journal Pro and existing Board License subscriptions. Polar’s privacy policy applies to billing information handled by Polar. Polar’s privacy policy

We do not use any third-party analytics or tracking services.

Cookies

This site uses essential cookies only. We set no advertising, analytics, or third-party tracking cookies. Here is every cookie we do set:

Cookie Purpose Duration
tj_session Signs you in and keeps you signed in after you sign in via a sign-in link, one-time code, or Google. HttpOnly, Secure, SameSite=Lax. Up to 30 days
tj_google_oauth Guards the Google sign-in redirect against CSRF. HttpOnly, Secure, SameSite=Lax. 10 minutes (cleared after sign-in completes)
cookie-notice-dismissed Remembers that you have seen the cookie notice so we do not show it again. 90 days

For the full detail, see our Cookie Policy.

Data retention

  • Newsletter subscribers. New subscriptions receive every new post by email. Existing preferences stay unchanged. We keep your email while you stay subscribed. Unsubscribe at any time using the link in any email.
  • Account data. We keep it while your account is active. Contact us to have it deleted.
  • Community data. We keep your posts, messages, and profile information while your account is active, or while the content stays publicly visible. We may keep deleted content in our moderation logs. Contact us to have your account, Community content, and uploaded images deleted in full.

Your rights

You may at any time:

  • Unsubscribe from newsletters using the link in any email
  • Sign out of your account to clear your session
  • Request access, correction, or deletion of your account and data by contacting us at our contact page

Children’s privacy

This site is not meant for children under 13, and we do not knowingly collect personal information from them. If you think a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We post any change on this page and update the effective date.

Contact

If you have questions about this policy, reach us through our contact page.