Privacy Policy

When you sign in with Google or Apple, we receive:

• Your name (as provided by the OAuth provider)
• Your email address

When you create a record, we store the display name, full name (optional), city (optional), URL slug, and entries you write. All of this is data you explicitly provide.

We don't collect your phone number, birthday, job title, location data, contacts, or browsing history. We don't run tracking pixels or retargeting. We don't sell your data.

• Published records are publicly visible at your URL, including your display name, city, and entries.
• Full name is stored privately and used only in JSON-LD structured data for search engines. It is not displayed on your public page.
• Email is used only for account authentication and transactional emails (if you opt in to notifications).

Your data is stored in Supabase (Postgres) hosted on AWS. The application is hosted on Vercel. Both are US-based services with SOC 2 compliance.

We use Plausible Analytics, which is privacy-focused and does not use cookies. Plausible collects no personal data and is fully GDPR-compliant. We see aggregate page views, not individual visitors.

We use only essential cookies for authentication (session tokens). No advertising cookies, no tracking cookies, no third-party cookies.

You can at any time:

• Edit your profile, entries, and URL from Settings
• Unpublish your record to hide it from public view (reversible)
• Delete your record and account permanently — all data is erased, URL held for 24 months
• Export your data by contacting us

We share data only with:

• Supabase — database and authentication
• Vercel — hosting and image generation
• Plausible Analytics — privacy-respecting analytics
• Google / Apple — OAuth sign-in only

We do not sell, rent, or share your data with anyone else.

We may update this policy. We'll note the effective date at the top. Continued use after changes constitutes acceptance.

Questions? Email hi@thingsiactuallylove.com.