🔒 Privacy Policy

1. Information We Collect

• Account data: email address and hashed password when you register, or profile email when signing in via Google/GitHub OAuth.

• Usage data: images you upload for pattern generation (processed locally in your browser — images are never uploaded to our servers), generation settings, and anonymous analytics events (Google Analytics 4).

• Payment data: handled entirely by PayPal; we never see or store your card numbers.

2. How We Use Your Data

• To operate your account (credits, check-in streaks, subscription status).

• To send verification emails and service notifications.

• To improve the product via aggregated, anonymized analytics.

We do not sell your personal data to third parties.

3. Cookies & Local Storage

We use localStorage to keep you signed in and remember preferences. Google Analytics and Google AdSense may set cookies for analytics and advertising purposes. You can disable cookies in your browser settings.

4. Third-Party Services

• Cloudflare (hosting, security, KV storage) — data stored in Cloudflare's global network.

• Google OAuth / GitHub OAuth — we receive only your verified email address.

• Resend — transactional email delivery.

• PayPal — payment processing (subject to PayPal's own privacy policy).

• Google AdSense / Analytics — advertising and analytics (free-tier users only).

5. Data Retention & Deletion

Account data is retained while your account is active. You may request account deletion and data erasure at any time by emailing [email protected]. We comply with GDPR (EU) and CCPA (California) rights including access, rectification, and erasure requests.

6. Security

Passwords are salted and hashed (SHA-256). All traffic is encrypted via HTTPS/TLS. Sessions expire after 30 days of inactivity.