Last updated 13 October 2026
Retro Records is a personal portfolio project. It collects only what it needs to let you sign in and keep your own server list.
What we store
- Account details: your username, email address and a one-way Argon2id hash of your password. Your actual password is never stored.
- Your records: the hostnames, IP addresses, locations, statuses and notes you enter.
- Security data: a keyed hash of your IP address (not the address itself) when you submit forms. It is used for rate limiting and deleted after 24 hours. We also record your last sign-in time and how many failed sign-ins your account has had, so brute-force attempts can be blocked.
Cookies
We set exactly one cookie, __Host-rrsid. It is a strictly necessary session cookie: it keeps you
signed in and protects forms against cross-site request forgery. It is HttpOnly,
Secure and SameSite=Strict. It is deleted when you close your browser, and the session behind it
expires after 15 minutes of inactivity. Because it is essential, there is no cookie banner. There are no
analytics, advertising or third-party cookies, and no third-party scripts.
Where it lives
The app runs on Vercel. Data is stored in a PostgreSQL database hosted by Supabase in the AWS ap-south-1 (Mumbai) region. Connections are encrypted in transit.
How long we keep it
Your account and records stay until you delete them. You can delete your account at any time from My account. This removes your account and every record you've added, immediately and permanently. Session data is removed within 24 hours of your last activity.
Your rights and contact
We don't sell or share your data. To ask a question or request a copy of your data, email fazalabbas2002@gmail.com.