Privacy Policy

Welcome to our service. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you use our service and tell you about your privacy rights and how the law protects you.

2.1 Information You Provide

• Account Information: When you register, we collect your email address, name, and password (encrypted).
• OAuth Information: If you sign in via Google OAuth, we collect your Google account email, name, and profile picture.
• Content: Any data, files, or content you upload or create using our service.

2.2 Automatically Collected Information

• Usage Data: Information about how you use our service, including page views, features accessed, and interaction patterns.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Analytics Data: We use Cloudflare Analytics to collect anonymous usage statistics to improve our service.

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our service functionality.
• Authentication: To verify your identity and manage your account.
• Communication: To send you service-related notifications and updates.
• Security: To detect, prevent, and address technical issues, fraud, and security threats.
• Analytics: To understand how users interact with our service and improve user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4.1 Storage Infrastructure

Your data is stored using Cloudflare's global infrastructure:

• Database: Cloudflare D1 (distributed SQLite database)
• File Storage: Cloudflare R2 (object storage)
• Cache: Cloudflare KV (key-value storage)

4.2 Security Measures

• Encryption: Passwords are encrypted using bcrypt hashing algorithm.
• HTTPS: All data transmission is encrypted using SSL/TLS.
• Access Control: Strict authentication and authorization controls protect your data.
• Rate Limiting: Protection against brute force attacks and abuse.

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (e.g., Cloudflare for hosting, Google for OAuth authentication).
• Legal Requirements: When required by law, legal process, or government request.
• Protection: To protect the rights, property, or safety of our service, users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal data, except where we are legally required to retain it.

Depending on your location, you may have the following rights:

• Access: Request access to your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request a copy of your data in a machine-readable format.
• Objection: Object to the processing of your personal data.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

We use cookies and similar tracking technologies to:

• Session Management: Maintain your login session using JWT tokens.
• Analytics: Understand service usage through Cloudflare Analytics (anonymous data).
• Security: Detect and prevent fraudulent activity.

You can control cookies through your browser settings, but disabling certain cookies may affect service functionality.

Our service integrates with the following third-party services:

• Google OAuth: For authentication (Google Privacy Policy applies)
• Cloudflare: For hosting, storage, and analytics (Cloudflare Privacy Policy applies)

These third parties have their own privacy policies. We encourage you to review them.

Our service is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.

Your data may be transferred to and processed in countries other than your country of residence. We use Cloudflare's global network, which replicates data across multiple regions for performance and reliability. We ensure that appropriate safeguards are in place to protect your data in accordance with this privacy policy.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes. Continued use of the service after changes constitutes acceptance of the updated privacy policy.