We believe in being straightforward about privacy. This policy explains what data we collect, why we collect it, and what your rights are. We do not sell your data.
UnboundedFigures is operated by Tyler Samuels, an individual based in New York, United States. For privacy requests, contact contact@unboundedfigures.com.
What We Collect
Account Information
When you create an account, we collect your email address, username, and any profile information you choose to provide (display name, bio, avatar). This is necessary to operate the Platform.
Content You Submit
We store all content you submit to the Platform: sketches, Network requests and responses, Open Problem attempts, project papers, Research Log entries, comments, and Collaboration Board messages and replies. This content is associated with your account and, if you have made it public, may be visible to other users and the open web.
A private project still has a public overview showing its title, mission, description, tags, Lead Figure, and member and watcher counts. Its workspace is open only to its members. A project’s Paper can be published publicly even when the project is private. Moderators may look at reported content, including private content, to review a report.
While you edit a shared paper, people who can read the project may see that you are editing and see your changes as you make them. Shared papers keep saved versions and a record of who saved them.
Activity and Settings
We also store your upvotes, followed topics (and the topic interests we infer from what you read), project memberships, join requests and watched projects, your notifications, the people you have blocked, and reports you file. If someone invites you to a project by email, we use the address they give us to send that one invitation.
Usage Data
We record some of your activity on the Platform ourselves, linked to your account when you are signed in: which sketches and papers you open, and what you search for. We use this to suggest things you might like and to show totals such as “viewed by 14 Figures.” We never show who viewed or searched for something. We also use PostHog to understand how the Platform is used in general (see Section 3).
Communication Preferences
We store your notification settings, including whether you have unsubscribed from email notifications. This is stored in your account profile and controls which transactional emails you receive.
Technical Data
Standard server logs, including IP addresses, browser type, and referring URLs, may be retained by our hosting provider, Vercel, in accordance with their own data practices.
How We Use Your Information
- To operate and provide the Platform and its features
- To send transactional email notifications (new comments, Network responses, project activity), only if you have not opted out
- To understand usage patterns and improve the Platform
- To enforce our Terms of Service and Community Guidelines
- To respond to support requests or legal inquiries
We do not use your information for advertising, and we do not sell or rent your personal data to any third party.
Third-Party Services
We work with the following third-party services to operate the Platform. Each has their own privacy policy that governs their handling of any data they receive.
Supabase: Authentication, database, file storage, and live collaboration
Your account, the content you post, uploaded images and documents, and the live editing of shared papers run on Supabase.
Resend: Email delivery
Resend delivers notifications, project invitations, The Margin, and internal account and safety alerts. It receives the recipient's address and the content of the email.
PostHog: Usage analytics
We use PostHog to understand how the platform is used. Events include the pages you visit, what you click, browser and device information, and an analytics identifier. We remove query strings and URL fragments before sending events. Session recording is turned off.
Vercel: Hosting and edge compute
The Platform is hosted on Vercel. Request logs, including IP addresses, may be retained by Vercel according to their own privacy policy.
Anthropic: Zakhira, the Network's historian
Zakhira uses Anthropic's AI to describe how a request and its responses developed and how requests connect. We send the original request, its responses, and the titles, dates, and contributor names Zakhira needs. Your other content is not sent.
Upstash: Abuse prevention
Upstash stores short-lived counters, keyed by your account or IP address, that limit how often requests can be made.
Cookies and Local Storage
We use session cookies to maintain your authentication state. Without these, you would be logged out on every page load. We do not use advertising cookies or behavioral tracking cookies beyond what PostHog requires to function.
PostHog sets a cookie to identify your browsing session for analytics purposes. This cookie does not contain personally identifiable information on its own.
Email Communications
We send transactional emails to notify you of activity on the Platform. For example, when someone comments on your sketch, responds to your Network request, or adds you as a project contributor.
You can turn these notifications off at any time by:
- Clicking the unsubscribe link in any notification email
- Visiting Settings → Notifications in your dashboard
Turning email off stops activity notifications, project invitations sent to your address, and The Margin. We may still send emails that are strictly necessary for your account (for example, password resets) regardless of this setting. If you don’t have an account, a member can send a project invitation to your address. It says who sent it, and we don’t add you to any list.
We also send The Margin, a monthly email about what happened on the Platform. It can mention public sketches, papers, and Network requests, and topics that three or more people searched for. It never says who searched for what. You can turn it off with the unsubscribe link in any email or in Settings.
Data Retention
We retain your account data and User Content for as long as your account is active. Deleting your account removes your login, your profile, your personal activity records, and the content covered by our deletion process. Work kept in shared projects and in requests other people took part in stays, attributed to “Deleted account”. Identifying information written inside that work is not removed automatically. If something you posted was reported, we may keep a copy of it for safety review and legal obligations. Contact us about personal information that remains.
Records of which papers you opened are deleted after 60 days. If you delete your account, your records of what you opened are deleted and your past searches are no longer linked to you. The search text itself and its date remain, and search text can itself contain personal information.
Usage analytics in PostHog are kept according to PostHog’s retention settings for our project.
Your Rights
Regardless of where you are located, you have the following rights with respect to your personal data:
- Access: download a copy of your data in Settings under Your Data, or ask us for anything it doesn't include
- Correction: you can update inaccurate or incomplete information directly in your account settings
- Deletion: you can request deletion of your account and associated personal data
- Opt-out: you can opt out of email notifications at any time via your account settings
To exercise any of these rights, contact us at contact@unboundedfigures.com. We aim to respond within 30 days and to meet any shorter deadline the law requires.
Children's Privacy
The Platform is not designed for or directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently done so, we will promptly delete that information. If you believe a child under 13 has created an account, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and, for material changes, notify users via email or a prominent in-platform notice. Continued use of the Platform after a policy change constitutes acceptance of the updated policy.
Contact
Privacy questions or concerns? Reach out and we’ll respond as quickly as possible.