Who operates Chronos-9
Chronos-9 is operated by Chronos-9 LLC, a Pennsylvania limited liability company (“Chronos-9,” “we,” “us,” or “our”). This policy explains what information the hosted Chronos-9 website, checkout, and members dashboard (collectively, the “Service”) process and why. Questions and privacy requests may be sent to [email protected].
Information we collect
- Purchase and account information: the required email address and Discord username you provide, selected access tier, access dates, hashed access code, and account status.
- Payment records: Stripe and other payment providers may collect your billing name, contact information, billing address, tax location, and payment-method details to process payment, prevent fraud, calculate tax, and comply with law. Chronos-9 keeps transaction identifiers, payment authorization, capture, cancellation, or refund status, amount, currency, tier, timestamps, and a Stripe-generated card fingerprint used for fraud and ban enforcement. Chronos-9 does not store your raw billing address in its local application database and does not receive or store your full card number or card security code.
- Login, eligibility, and security records: IP addresses, login and access times, last-seen times, security events, proxy/VPN results, country indicators, an essential session token, and timestamps and policy versions showing your Terms, Refund Policy, adult-eligibility, and VPN/proxy acknowledgments.
- Device characteristics: graphics hardware/renderer, processor-core and device-memory indicators, screen size, color depth, pixel ratio, touch capability, timezone and offset, a derived device fingerprint, and indicators used to detect virtual machines or suspicious account sharing.
- Optional saved-login information: if you choose “Remember this device,” Chronos-9 stores a one-way hash of an opaque browser credential, the associated hashed access record, and creation, use, rotation, and expiration timestamps. Your plaintext purchase code is not stored in the browser for this feature.
- Optional mobile-alert information: if you turn on mobile push alerts, Chronos-9 stores the browser-issued push endpoint and encryption keys, the associated hashed access record, alert-delivery status, and related timestamps. The endpoint is a device/browser delivery capability; it does not contain the hourly model pick.
- Browser-only preferences: dashboard layout, Focus mode, and alert-sound preference are stored in your own browser using local storage.
The Discord username is buyer-supplied contact information. Entering it does not connect or authorize a Discord account, and Chronos-9 does not claim that ownership has been independently verified.
How we use information
We use this information to process purchases, start and administer access, deliver access codes, provide requested features, enforce one active session per code, communicate about the Service, prevent fraud and unauthorized sharing, detect proxies and suspicious devices, trace leaked member feeds, administer payment reversals and disputes, investigate abuse, comply with legal obligations, and maintain the security and reliability of the Service. To deter and trace feed leaks, the member dashboard visibly watermarks the screen with the account email and/or supplied Discord username plus an opaque per-member trace marker.
Depending on the context and applicable law, we process information because it is needed to provide the Service you requested, because you consented, because we must comply with law, or because we have a legitimate need to secure and operate the Service.
Service providers and external content
Chronos-9 sends the checkout email, supplied Discord username, selected tier, and policy acknowledgments to Stripe as Checkout information and metadata. Stripe and its payment partners collect and process billing contact and address information, tax location, and payment details for payment processing, fraud prevention, tax, and legal compliance. Resend receives the delivery email address and plaintext access code so it can send that code. Chronos-9 also uses Cloudflare and Turnstile for network and bot protection, proxycheck.io for proxy/country checks, and DigitalOcean for hosting. If you opt in to mobile alerts, your browser’s push provider—such as Apple, Google, Mozilla, or Microsoft—processes the encrypted push delivery for that browser or device. The lock-screen message is generic and does not include a side, strike, price, ticker, or model decision. Google Fonts and TradingView content can be loaded directly by your browser and may receive ordinary network and browser information under their own policies. Discord receives information when you follow its external link or communicate there.
Chronos-9 is not configured to sell personal information or use it for advertising profiles.
When information may be disclosed
We may disclose information to the service providers described above, when reasonably necessary to investigate fraud or protect the rights, safety, and security of Chronos-9 LLC, its members, managers, personnel, users, or others, when required by lawful process, or as part of a merger, financing, reorganization, sale, or transfer of all or part of the business. We do not authorize service providers to use information for purposes unrelated to the services they provide to us.
Cookies and browser storage
Chronos-9 uses an essential secure, HttpOnly session cookie. The browser cookie has a maximum age of 30 days, while the corresponding server session ends on logout, replacement login, revocation, or after approximately 20 minutes of inactivity. If you explicitly choose “Remember this device,” Chronos-9 also places a separate secure, HttpOnly, same-site credential cookie on that browser for up to 30 days. The cookie contains a random opaque value—not your purchase code—and only its one-way hash is stored by Chronos-9. It rotates when used and is cleared for the current browser when you log out, leave the option unchecked on a later code login, or replace it with a new purchase.
Dashboard preferences remain in your browser until you clear them. An opted-in push subscription can remain on that device after the browser session becomes idle so a background heads-up can work; every attempted delivery is still checked against the current paid-access status. Third-party services may use their own cookies or storage.
Do Not Track and third-party tracking
Browsers may offer a “Do Not Track” signal. Because there is no uniform standard for responding to that signal, the Service does not currently change its behavior when it receives one. Chronos-9 does not itself track your activity across unaffiliated websites and is not configured for cross-context behavioral advertising. Payment, security, font, chart, and other external providers or embedded content may collect ordinary device, browser, and network information when your browser contacts them; their handling and any tracking across services are governed by their own policies and controls.
Retention and deletion
Paid access records remain in the live authentication system until they are administratively deleted or purged. Deleting an access code removes its live sessions, login history, associated device records, saved-login credentials, access record, and active mobile-alert subscriptions from the live authentication system. Saved-login credentials expire within 30 days and cannot be redeemed after the related access is expired, revoked, banned, deleted, or out of date with current policy acceptance. Expired, revoked, deleted, banned, or otherwise ineligible access records are not sent push alerts. Invalid push endpoints are retired automatically, and old delivery receipts may be pruned as operational records age.
Payment-event metadata and security ban records are separate. They may be retained for payment reconciliation, disputes, fraud prevention, security, and legal obligations. Delivered plaintext access-code recovery copies are removed; an undelivered recovery copy is encrypted until delivery can be retried. Email, card-fingerprint, and advisory IP ban evidence remains until administratively removed. Operational logs rotate. Older copies may remain in restricted backups until those backups are securely retired; no fixed backup-deletion period is currently promised. Service-provider copies follow the providers’ own retention policies.
Security
We use administrative and technical safeguards intended to protect personal information, including restricted databases, hashed access codes and saved-login credentials, credential rotation, encrypted recovery material, secure HttpOnly cookies, and access controls. No website, network, transmission, or storage system can be guaranteed completely secure. You are responsible for keeping your access code and devices secure and for notifying us promptly if you suspect unauthorized access.
Your choices and privacy rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information, to object to or restrict certain processing, or to appeal a denied request. To make a request, email [email protected]. We may need to verify your identity and may deny or limit a request where permitted by law. Limited records may be retained where reasonably necessary for payments, disputes, fraud prevention, security, exercising or defending legal claims, or other legal obligations.
You may also contact us at that address to update your checkout email or supplied Discord username. Because browser-only preferences remain on your device, you can remove them by clearing this site’s local storage in your browser. Saved login is optional: logging out, signing in with the option unchecked, or clearing this site’s cookies removes the current browser credential. Mobile alerts are optional. You can turn them off from the Hourly Alerts control, revoke notification permission in your browser or device settings, or contact us to request removal of stored push subscriptions.
Children’s privacy
The Service is intended only for adults and is not directed to children under 18. We do not knowingly collect personal information from a child under 18. If you believe a child has provided information to the Service, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as the Service, our practices, or legal requirements change. The date above identifies the current version. If a change is material, we may provide additional notice where required by applicable law.
Contact
Chronos-9 LLC
Pennsylvania limited liability company
Email: [email protected]