We believe in being straightforward about privacy. This policy explains exactly what data we collect, why we collect it, and what your rights are. We do not sell your data.
What We Collect
Account Information
When you create an account, we collect your email address, username, and any profile information you choose to provide (display name, bio, avatar). This is necessary to operate the Platform.
Content You Submit
We store all content you submit to the Platform — sketches, bridge responses, project papers, research log entries, and comments. This content is associated with your account and, if you have made it public, may be visible to other users and the open web.
Usage Data
We collect anonymized information about how you use the Platform, including pages visited, features used, and session duration. This is collected via PostHog (see Section 3) and helps us understand what’s working and what isn’t.
Communication Preferences
We store your notification settings, including whether you have unsubscribed from email notifications. This is stored in your account profile and controls which transactional emails you receive.
Technical Data
Standard server logs — including IP addresses, browser type, and referring URLs — may be retained by our hosting provider, Vercel, in accordance with their own data practices.
How We Use Your Information
- To operate and provide the Platform and its features
- To send transactional email notifications (new comments, bridge updates, project activity) — only if you have not opted out
- To understand usage patterns and improve the Platform
- To enforce our Terms of Service and Community Guidelines
- To respond to support requests or legal inquiries
We do not use your information for advertising, and we do not sell or rent your personal data to any third party.
Third-Party Services
We work with the following third-party services to operate the Platform. Each has their own privacy policy that governs their handling of any data they receive.
Supabase — Authentication and database hosting
Your account credentials and all platform data are stored securely via Supabase. Supabase is SOC 2 Type II certified.
Resend — Transactional email delivery
Used to send account-related emails — notifications, password resets, and similar. Your email address is shared with Resend solely for delivery.
PostHog — Usage analytics
We use PostHog to understand how the platform is used — which pages are visited, session length, and general engagement patterns. No personal identifiers are sent beyond your session.
Vercel — Hosting and edge compute
The Platform is hosted on Vercel. Request logs, including IP addresses, may be retained by Vercel according to their own privacy policy.
Cookies and Local Storage
We use session cookies to maintain your authentication state. Without these, you would be logged out on every page load. We do not use advertising cookies or behavioral tracking cookies beyond what PostHog requires to function.
PostHog sets a cookie to identify your browsing session for analytics purposes. This cookie does not contain personally identifiable information on its own.
Email Communications
We send transactional emails to notify you of activity on the Platform — for example, when someone comments on your sketch, claims a bridge you requested, or adds you as a project contributor.
You can unsubscribe from these notifications at any time by:
- Clicking the unsubscribe link in any notification email
- Visiting Settings → Notifications in your dashboard
Unsubscribing stops all non-essential email. We may still send emails that are strictly necessary for account security (e.g., password resets) regardless of your notification preferences.
Data Retention
We retain your account data and User Content for as long as your account is active. If you delete your account, we will delete your personal information and User Content within a reasonable period, except where retention is required by law or where your content has been incorporated into collaborative works by other users in a way that makes isolation impractical.
Anonymized usage analytics may be retained indefinitely as aggregate data that cannot be traced back to you individually.
Your Rights
Regardless of where you are located, you have the following rights with respect to your personal data:
- Access — you can request a copy of the personal data we hold about you
- Correction — you can update inaccurate or incomplete information directly in your account settings
- Deletion — you can request deletion of your account and associated personal data
- Opt-out — you can opt out of email notifications at any time via your account settings
To exercise any of these rights, contact us at tsamuels456@gmail.com. We will respond within 30 days.
Children's Privacy
The Platform is not designed for or directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently done so, we will promptly delete that information. If you believe a child under 13 has created an account, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and, for material changes, notify users via email or a prominent in-platform notice. Continued use of the Platform after a policy change constitutes acceptance of the updated policy.
Contact
Privacy questions or concerns? Reach out and we’ll respond as quickly as possible.