Privacy Policy

When you create an account we collect your display name and email address; your password is handled and stored in hashed form by our authentication provider (Supabase) and is never visible to us. As you use the service we store the favorites and downloads you make and any messages you send through the Contact form. We also collect limited technical data needed to run and secure the service, such as device and browser type, pages viewed, and an approximate location derived from your IP address.

We process the data needed to create your account and provide Pro on the basis of performance of a contract, and we process limited technical and security data on the basis of our legitimate interest in keeping the service available and protected from abuse. Optional analytics, advertising, and personalization run only after you opt in through our consent banner. You can withdraw consent at any time using the “Privacy choices” control in the footer; withdrawing consent does not affect processing that already took place.

We use a small number of essential cookies to keep you signed in and to remember your consent choices; these are required for the service to work. Only with your consent do we set analytics cookies, which help us understand aggregate, non-identifying usage so we can improve the product. You can review or change these choices at any time from “Privacy choices” in the footer.

The service is free and may include sponsored or promotional content for visitors who are not signed in. Where you have consented, we may tailor recommendations to your interests. Signed-in users do not see ads. We do not sell your personal data. Any third-party advertising partners we work with will be named here before such advertising goes live.

The service runs on Supabase (database and authentication) and Vercel (hosting and content delivery). Personal data is currently stored and processed on Supabase infrastructure in the European Union (Frankfurt), and may be processed transiently on Vercel’s global edge network to deliver the site. Where personal data is transferred outside the Kingdom of Saudi Arabia, we rely on appropriate safeguards as required by the PDPL and GDPR. We are evaluating hosting personal data within a Saudi region; this section will be updated when that is finalized.

You have the right to access your personal data, receive a portable copy, correct it, and request its erasure. Signed-in users can export their data and request account deletion directly from the Data & privacy page in their account. You may also contact us to exercise any of these rights, and we aim to respond within 30 days.

We keep personal data only as long as your account is active and as needed to provide the service. Some records may be kept longer where the law requires. When data is no longer needed, we delete or anonymize it.

The service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

Questions or requests about your personal data can be sent through our Contact page. If we appoint a Data Protection Officer, their name and contact details will be published here.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where the law requires we will ask for your renewed consent.