Privacy policy

• Account information — email, name, hashed password. Authentication is handled by Supabase Auth.
• Subscription information — handled by our payment processor. We see plan status and billing history; we don't see full card details.
• Usage data — which props you view, which filters you apply, which sort orders you use. Helps us improve the product.
• Device data — browser, operating system, IP address. Standard server logs.
• Analytics — page views and aggregated traffic patterns via Plausible. No cookies, no cross-site tracking, no fingerprinting.

We don't load Facebook Pixel, Google Analytics, or any third-party advertising trackers. We don't fingerprint your device. We don't sell user data to advertisers, third-party operators, affiliates, or anyone else. Period.

• Provide the service — you log in, we show your data, your filters persist where they should.
• Improve the product — which features are used, where users get stuck, which props get the most attention.
• Bill correctly — our payment processor handles payments; we receive plan status to gate access.
• Communicate — account-related emails like password resets and billing notices. No marketing emails without explicit opt-in.

• Supabase — database and authentication. Stores account and usage data.
• our payment processor — subscription billing. Handles payment processing.
• Plausible — analytics. Receives aggregated, anonymized page views.
• Vercel — hosting. Serves the application from edge regions.
• Cloudflare — DNS and DDoS protection at the network edge.

We never share data with advertisers, marketing affiliates, or data brokers. If we ever add a new subprocessor, this list will be updated before the change takes effect.

We use the minimum cookies required for authentication, so you stay logged in, plus CSRF protection. No advertising cookies. No cross-site tracking. No localStorage abuse. No fingerprinting.

Account data is kept while your account is active. Cancel and delete your account, and we delete personal data within 30 days — except where retention is required by law. Billing records are typically retained for 7 years for tax purposes.

Depending on your jurisdiction, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccurate or incomplete data.
• Deletion — close your account and delete your data.
• Portability — export your data in a machine-readable format.
• Object or restrict — limit how we process your data.

Email support@props.fyi to exercise any of these rights. We respond within 30 days.

Industry-standard controls: TLS for all connections, encrypted data at rest, hashed passwords, principle of least privilege for internal access, regular dependency updates. We're not perfect — if you spot a security issue, email security@props.fyi and we'll respond fast.

Data may be processed in regions where our infrastructure providers operate, primarily the United States and European Union. Where required, we use standard contractual clauses to protect cross-border transfers.

props.fyi is not for users under 18. We don't knowingly collect data from minors. If you believe a minor has created an account, email support@props.fyi and we'll delete it immediately.

Material changes will be communicated via email and in-product notice at least 7 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Questions about privacy or data handling? Email support@props.fyi.