Jwala — sign in

Sign in

Username

Password

Ten characters or more. There is no composition rule: length is what helps, and a rule that demands a capital and a digit mostly produces the same five passwords.

What this stores about you, and what it does not

Stated here because it is true of the database, not because it is policy prose: these are properties the schema enforces, and there is a test for each one that tries the violation and is refused.

Your password is stored as a scrypt hash with its parameters, never in plain text. The session is a cookie holding a random token; only the token's sha256 is kept, so the database holds nothing that can be replayed. Sessions expire absolutely and also time out when idle.
Each account sees its own charts. Asking for someone else's gets the same answer as asking for one that does not exist.
Nothing leaves this machine. No outbound request is made by any part of this software: no analytics, no font service, no geocoding, no telemetry. The place lookup is a file held here.
The terms and conditions are linked from the birth form and have to be agreed to before a chart is computed. They are written but not yet reviewed by a lawyer, which is said on the page itself rather than left to be discovered.