Privacy Policy
Last updated: August 2026.
This is a genuine draft, not filler text — but it isn't legal advice. Have a lawyer review it before you consider it final, especially if you'll have users in the EU (GDPR) or California (CCPA).
What we collect
- Account info: if you create an account, we store your email address and an encrypted password (we never see your actual password — Supabase Auth handles that).
- Contact form submissions: your name, email, and message when you use the /contact form.
- Basic analytics: page views and general usage patterns via Vercel Analytics, which does not use cookies to track you individually across sites.
- Cookies: a small cookie to remember you've dismissed our cookie notice, plus session cookies to keep you signed in.
What we don't do
We don't sell your data. We don't share it with advertisers.
How we store it
Your data is stored with Supabase, our database and authentication provider, which acts as a data processor on our behalf. We don't run our own servers for this data.
Your rights
You can update your account details from /account, or ask us to delete your account and associated data by emailing us via /contact. We'll respond within a reasonable time.
Children
This site isn't directed at children under 13, and we don't knowingly collect data from them.
Changes
We may update this policy as the product changes. Material changes will be reflected here with an updated date at the top of this page.
Contact
Questions about this policy: see /contact.