Privacy, plainly.
We collect what we need to run accounts and subscriptions, and nothing for advertising. Here is exactly what that means.
What we collect
- Account data: your email address, a hashed password (or your Google account identifier if you sign in with Google), and an optional display name.
- Product data: the assets you save and the collections you create.
- Billing data: subscription status, amounts, dates, and payment references from HandyPay. We don’t receive full card numbers.
- API tokens: stored only as one-way hashes, with name, creation and last-used time.
- Technical logs: standard server logs, such as IP address, user agent and request path, kept by our hosting providers for security and debugging.
Browsing and copying free assets requires no account, and we don’t track it per person.
How we use it
To provide the service: authenticate you, deliver what you’re entitled to, process subscriptions, send transactional email (verification codes, password resets, receipts), prevent abuse, and answer support requests. We don’t sell personal data, and we don’t use it for advertising.
Service providers
- Supabase: authentication and database.
- HandyPay: payment processing.
- Resend: transactional email delivery.
- Google: only if you choose Google sign-in.
- Our hosting provider: serving the website.
Cookies & storage
We use only strictly necessary cookies to keep you signed in. Your light or dark theme choice is kept in your browser’s local storage. We don’t currently use analytics or advertising cookies; if that changes, this page will say so first.
Retention
Account data is kept while your account exists. Billing records may be kept longer where the law requires it. Server logs are kept for a limited period by our providers.
Your choices
You can update your display name in your account, export or delete your data, or ask what we hold, by emailing hello@sundaeui.dev. Depending on where you live, you may have additional rights under local law; we’ll help you exercise them.