The proof, the access, the forgetting

Subscription, confirmation, departure, block, export, erasure: every event carries where it came from (form, import, API, team, subscriber), its date, its IP address, its page.

Kept five years by default. The proof outlives the subscription.

Everything that concerns one person, register and sending history included.

Name, address, attributes: erased. The figures stay, attached to nobody. The address can stay blocked, so that an import does not bring the person back.

“I never subscribed” blocks the address on the spot.

Forget those who left after N days: one setting per team, applied every night.

Lekalao ships none. Your readers’ IP address is not a product.

Every action that changed something — a campaign sent, a list deleted, an export downloaded, a token created — writes a line: who, what, to what, from which address, by the browser or by which API token. Nothing anybody typed is kept. For the owners of the team, searchable, exportable, kept thirteen months.

Owner

everything, billing and members

Editor

writes, sends and exports

Writer

writes and prepares; neither sends nor exports

Viewer

reads, changes nothing

Sign-in

2FA and passkeys, which a team can ask of every member

Before sending

a second pair of eyes, if the team asks for it

Account

verified e-mail required