Privacy Policy
Effective 2026 — plain language, no fine print
1. What we keep
Your account (email and, with Google sign-in, your name), your archive (object images, titles, stories, links, and their positions on the canvas), and anonymous usage counts for your public page (views and object clicks with a coarse traffic source such as “instagram” or “direct”). Nothing more.
2. What visitors see
Your public archive page shows exactly what you place on it: your username, your curator's note, and your objects with their stories and outbound links. Your email address is never displayed.
3. Analytics
View and click counts exist so you can understand your own archive. They are aggregated, contain no personal identifiers of your visitors, and are visible only to you.
4. Third-party destinations
Buy buttons and links lead to external sites (Etsy, Discogs, Bandcamp, Shopify, Instagram, and others). Once a visitor leaves your archive, the destination's own terms and privacy policies apply.
5. Your control
You may edit or delete any object, unpublish your archive, or delete your account at any time. Deleting your account removes your profile, objects, images, and analytics records.
6. Storage
Data is stored with our infrastructure provider (Supabase) with row-level security: only you can modify your archive, and only you can read your analytics.