Privacy Policy

1. Information we collect

• Account data: email address, password hash, username/display name, and internal user identifier.
• Profile data: avatar, background images, bio/description, links, selected themes, design settings, and third-party integrations.
• Technical data: IP address, user agent, request timestamps, approximate country/region, referrers, and device/browser information.
• Usage analytics: profile views, link clicks, and aggregated feature usage statistics.
• Payment information: transaction identifiers, payment status, plan type, and Premium activation/renewal events (we do not store full card details).

2. How we use information

• to create and maintain your account and profile;
• to authenticate users and protect access security;
• to display your profile and links to visitors;
• to prevent abuse, spam, and attacks on our infrastructure;
• to improve the Service and develop new features;
• to handle support requests and communicate with you;
• to comply with legal obligations and lawful government requests.

3. Where data is stored

Account and profile data may be stored in Supabase (PostgreSQL). Media files (avatars, backgrounds, audio, and other attachments) may be stored in cloud storage such as Cloudflare R2.

Passwords are stored only as cryptographic hashes. We do not store passwords in plain text.

4. Cookies and sessions

We use cookies and similar technologies to:

• maintain login sessions;
• protect against spam and automated requests;
• provide basic analytics and improve the user experience.

We do not store your password or sensitive payment details in cookies. You can manage cookies in your browser settings, but some functionality may be unavailable if cookies are disabled.

5. Sharing with third parties

We do not sell your personal data.

We may share data only in the following cases:

• to comply with laws or lawful requests from authorities;
• to work with payment providers and infrastructure providers (hosting, CDN, storage) required to operate the Service;
• to investigate abuse, fraud, attacks, or violations of our Terms.

Any third party involved is expected to provide protection comparable to our standards and applicable legal requirements.

6. Data retention

Core account and profile data is retained while your account exists or as needed for the purposes described in this Policy.

Certain technical logs, security data, and records of operations (including payments) may be retained for a limited period (e.g., 30–180 days, or as required by law) to analyze incidents and meet legal obligations.

7. Payments and Premium

When purchasing Premium or other paid features, we process a limited set of payment- related data: transaction ID, status, amount, currency, payment method, and plan details.

Full card details are handled by the payment provider and are not shared with us in plain form. We only receive the information necessary to confirm payment and manage Premium status.

8. Your rights

Depending on applicable law, you may:

• update your profile information through your account settings;
• request deletion of your account and associated data;
• request information about data we hold about you and how it is processed;
• object to certain processing activities where permitted by law;
• withdraw consent where processing is based on consent (some features may stop working).

9. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page.

If changes are material, we may notify you via the account interface, email, or other reasonable methods. By continuing to use the Service after changes take effect, you agree to the updated Policy.

10. Contact

For questions about personal data processing, Premium, payments, or exercising your rights, contact us:

• Email: [email protected]
• Support: [email protected]