Privacy Policy
Last modified: March 8, 2025
1. Information We Collect
When you create an account or sign in (e.g. via Google), we receive and store the information provided by the sign-in provider: your name, profile picture URL, and the provider's account identifier. We do not receive or store your password. We also create and store session data (a session identifier and a hashed session secret) so we can keep you logged in. We may collect information you provide directly in other ways (e.g. when you contact us or update preferences such as newsletter opt-in). When you visit our site, we may automatically collect information such as your IP address and browser type.
2. How We Use Your Information
We use the information we collect to create and maintain your account, to keep you logged in across visits, to display your name and profile picture in the service, to communicate with you (including newsletters if you have opted in), to improve our services, and to comply with legal obligations. We do not sell your personal information to third parties.
3. Cookies and Similar Technologies
We use an essential session cookie to keep you logged in. This cookie is http-only (not accessible to JavaScript), is set to secure in production, and has a limited lifetime. We do not use cookies for advertising or tracking. You can control cookies through your browser, but signing in requires this session cookie to function properly.
4. Data Sharing and Disclosure
We may share your information with service providers who assist us in operating our site and conducting our business, subject to confidentiality obligations. We may also disclose information when required by law or to protect our rights and safety. When you sign in through a third-party provider (e.g. Google), that provider's privacy policy also applies to the data they collect and process. We do not sell your personal information.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information: session secrets are stored in hashed form, and the session cookie is http-only and transmitted securely in production. However, no method of transmission over the internet is completely secure.
6. Your Rights
Depending on your location, you may have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to data portability. To exercise these rights, please contact us using the information provided on this website.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last modified" date. We encourage you to review this policy periodically.
8. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through the contact information provided on this website.