Privacy Policy

1. Information We Collect

When you sign in via a third-party OAuth provider (Google, GitHub, or X/Twitter), we receive and store:

• Your display name and username
• Your profile picture URL
• Your email address (if provided by the OAuth provider)
• Your provider ID (used to identify your account)

We do not store passwords or payment information. Sign-in is entirely optional.

2. How We Use Your Information

We use your account information solely to:

• Identify your account across sessions
• Sync your saved favorites across devices
• Display your name and avatar in the app UI

3. Data Storage

Account data is stored in a secure database hosted on Railway. We use industry-standard encryption for data in transit (HTTPS) and at rest.

4. Cookies and Sessions

We use a session cookie to keep you logged in. This cookie is essential for the sign-in feature and expires after 30 days of inactivity. Anonymous users may also have a local identifier stored to associate locally-saved favorites.

5. Third-Party Services

We use the following third-party services that may receive data:

• Google OAuth — for sign-in
• GitHub OAuth — for sign-in
• X/Twitter OAuth — for sign-in
• Cloudflare — for CDN and DDoS protection (processes IP addresses)
• Railway — for hosting (processes server logs)

6. Data Deletion

You may request deletion of your account data at any time by contacting us via @bulliebot on X/Twitter.

7. Children's Privacy

This Service is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on the Service.

9. Contact

For privacy-related questions, contact us via @bulliebot on X/Twitter.