Privacy Policy

Effective August 26, 2026

This policy explains how GNU Radio World handles personal information when you use the website, sign in, buy prepaid AI credits, or use Graham with those credits. Questions and privacy requests can be sent to [email protected].

Information we handle

• Account information: your name, email address, profile image, verified-email status, and the identifiers needed to connect your Google or GitHub account.
• Session and security information: session identifiers, IP address, browser user agent, timestamps, and records used for authentication, rate limiting, fraud prevention, and service security.
• Purchase and usage records: your Polar customer identifier, credit purchases, balance, holds, expiration, refunds, disputes, model and token usage, prices, and associated transaction identifiers. GNU Radio World does not receive or store your full payment-card details.
• AI request content: when you use prepaid credits with Graham, the service processes the prompt, current flowgraph, relevant block metadata, tool results, and any console output included for diagnosis. This content is sent to OpenAI to generate a response. It is not intentionally stored in GNU Radio World's account or billing database.
• Information kept on your device: the editor can store preferences, consent choices, and project data in your browser. That information remains on your device unless you choose an action that sends it to a service, such as asking Graham about the current flowgraph.

How we use information

We use this information to authenticate users, link sign-in methods with the same verified email, provide and meter AI requests, maintain the credit ledger, process purchases and refunds, prevent abuse, secure and troubleshoot the service, comply with legal obligations, and communicate essential account or low-balance notices.

Services that receive information

• Cloudflare hosts the site, Worker, and account and billing database.
• Google or GitHub provides the sign-in method you select.
• Polar is the merchant of record and handles checkout, payment information, receipts, taxes, and refunds.
• OpenAI processes prepaid Graham requests and returns model output.

Each provider handles information under its own terms and privacy policy. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer. We do not sell personal information or use it for targeted advertising.

Cookies

The account service uses essential, secure cookies to keep you signed in and protect the OAuth sign-in flow. These cookies are not used for advertising.

Retention and deletion

Account and session information is retained while needed to provide and secure the service. If you request account deletion, identifying account information is anonymized and active sign-in connections are removed. Purchase, ledger, usage, refund, dispute, and related security records are retained in de-identified or otherwise legally required form for accounting, fraud prevention, dispute handling, and compliance. Some information may also remain temporarily in backups or provider systems under their retention policies.

Your choices and rights

You may sign out at any time and can request access, correction, deletion, or another privacy right available where you live by emailing [email protected]. We may need to verify your identity before completing a request. You can also manage payment records and refunds through the Polar customer portal.

Children

The prepaid-credit service is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy as the service changes. The effective date above will be revised when material changes are published.