Privacy Policy

1. What Personal Data We Collect

We collect only the minimum data necessary to provide the Service:

Information you provide:

• Email address (when you create an account)
• Display name (optional; for public gallery attribution)
• Animation content you create and save

Technical information (for service operation only):

• IP address (for rate limiting and abuse prevention; not logged long-term)
• Session authentication tokens (managed by Supabase, not stored locally by us)

What we explicitly do NOT collect:

• Usage analytics (which animations you view, which features you use)
• Device information (browser type, operating system, screen size)
• Behavioral tracking or user journey data
• Cookies for advertising or analytics purposes

2. OAuth Authentication

We offer optional sign-in with Google as an alternative to email/password authentication.

What We Receive:

• Your email address
• Your display name
• Your profile picture URL (optional)

We do NOT receive your Google password, calendar, contacts, or any other private data. We do NOT share your usage data with Google.

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Save and sync your animations across devices
• Display public content in the gallery
• Send important service updates
• Enforce our Terms of Service
• Protect against fraud and abuse

3. Data Storage & Residency

Cloud Storage (Registered Users): Your data is stored on Supabase, which uses PostgreSQL databases hosted on cloud infrastructure in the US (us-east-1 region). Data is encrypted in transit (TLS) and at rest.

Browser Storage (Guest Users): Guest users' (Tier 0) animations are stored entirely in your browser's localStorage. This data is not transmitted to our servers unless you explicitly choose to save animations to the cloud by registering an account.

Data Processors: Supabase is our primary data processor. We do not share your data with third-party analytics or marketing vendors.

4. Data Sharing & Sales

We do not sell, rent, or trade your personal data. We do not sell your data to advertisers, data brokers, or any third parties.

We may share data only in these limited circumstances:

• Service providers: Supabase (database and authentication hosting); they are contractually bound not to use your data for their own purposes
• Law enforcement: Only if required by law, with a valid legal order
• Public content: Your public gallery animations are visible to all users and licensed under CC-BY-SA 4.0

5. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your animation data
• Withdraw consent for data processing

To exercise these rights, visit your account settings or contact us.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Cookies & Browser Storage

Strictly Necessary Cookies: We use session cookies and localStorage only for:

• Authentication (Supabase session tokens)
• Session recovery (so you remain logged in across page reloads)
• Guest animation storage (Tier 0 users' offline editing)

No Consent-Required Cookies: We do not use advertising, analytics, or tracking cookies. No banner is displayed because no cookie consent is required — all cookies are strictly necessary for core functionality.

See our Terms of Service for details on how your data is stored and managed.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

10. Contact

If you have questions about this Privacy Policy, please contact us.