Privacy Policy

1. Information we collect

• Account information. Your email address and a hashed password when you create an account.
• Content you add. Anything you create or store in the Service.
• Technical data. Standard server logs such as IP address, browser type, and timestamps, used for security and debugging.

We do not use advertising trackers or sell personal information.

2. How we use information

• To provide, maintain, and secure the Service.
• To send transactional email such as sign-up confirmations and password resets. We do not send marketing email without your consent.
• To respond to your support requests.

3. Cookies

We use strictly necessary cookies to keep you signed in. We do not use third-party analytics or advertising cookies.

4. Service providers

We rely on a small number of providers to operate the Service. They process data only on our behalf:

• Supabase for database hosting and authentication.
• Resend for delivering transactional email.
• Our hosting provider for running the application.

5. Data retention and deletion

We keep your data for as long as your account is active. When you delete your account, your content is removed from our production systems promptly and from backups within a reasonable period. You can request deletion or a copy of your data by emailing [email protected].

6. Security

Data is encrypted in transit and at rest, and access to each record is restricted to its owner at the database level. No method of storage is perfectly secure, so please use a strong, unique password.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this policy from time to time. The effective date above will change when we do, and we will notify you of material changes by email or within the Service.

9. Contact

Questions about privacy? Email [email protected].