Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address - For account identification and communications
• Display name - How you appear on the platform
• Profile picture - Optional, or provided by social login
• Authentication provider - If using Google or Apple sign-in

Voting Data

When you vote on products:

• Vote value - Your rating (hate, neutral, love)
• Timestamp - When you voted
• Product reference - What you voted on

Privacy Protection: Individual votes are aggregated and may be processed using blockchain technology, votes remain legitimate and secure.

Usage Data

We automatically collect:

• Device information - Browser type, operating system.
• IP address - For security and approximate location.
• Pages visited - To improve user experience.
• Affiliate link clicks - To track commission attribution.

Blockchain Data

If you connect a blockchain wallet, your wallet address may be stored to enable token rewards. Blockchain transactions are public by nature but are not linked to your personal identity on our platform.

2. How We Use Your Information

We use your information to:

• Provide and maintain the voting platform.
• Authenticate your identity and secure your account.
• Calculate and display aggregated voting results.
• Distribute token rewards for participation.
• Track affiliate commissions (without sharing personal data).
• Improve our Service and develop new features.
• Communicate important updates about the Service
• Prevent fraud and enforce our Terms of Service

3. Information Sharing

We do not sell your personal information. We may share data with:

Service Providers

• Supabase - Database and authentication hosting.
• Hetzer/ Coolify - Website hosting and analytics.
• Google - OAuth authentication (if you choose Google sign-in).
• Apple - OAuth authentication (if you choose Apple sign-in).

Affiliate Partners

• Amazon Associates - Receives click and purchase data for commission tracking.
• Skimlinks - Receives click data for affiliate link conversion.

Note: We share click events, not your personal profile or voting data.

Legal Requirements

We respect your privacy and will never share without your consent.

4. Data Security

We protect your data using:

• Encryption - All data transmitted over HTTPS.
• Secure authentication - Cutting edge technology developed for a Soilarpunk future.
• Row-level security - Database policies restrict data access.
• Privacy-preserving computation - Vote aggregation protects individual choices.
• Regular security audits - We review and update our security practices regularly.

5. Your Rights and Choices

You have the right to:

• Access - Request a copy of your personal data.
• Correction - Update inaccurate information in your profile.
• Deletion - Request deletion of your account and associated data.
• Opt-out - Unsubscribe from non-essential communications.

To exercise these rights, contact us at numbat11@gmail.com or use the Settings page in your account.

6. Cookies and Tracking

We use:

• Essential cookies - For authentication and session management.
• Analytics - To understand how users interact with our platform.
• Affiliate tracking - To attribute purchases to click sources.

You can control cookies through your browser settings.

7. Data Retention

We retain your account data for as long as your account is active. Voting data is aggregated and anonymised over time. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

8. International Data Transfers

Your data may be processed in countries outside your residence, including Australia (where our servers are located),the United States, Europe & Asia (where some service providers operate). We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Popyalar is not intended for children under 9. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information outside what is deemed reasonable, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

12. Additional Rights for EU/UK Users

If you are located in the European Union or United Kingdom, you have additional rights under GDPR:

• Right to object to processing based on legitimate interests.
• Right to restrict processing in certain circumstances.
• Right to lodge a complaint with a supervisory authority.

Our legal basis for processing your data includes: consent (for optional features), contract performance (for providing the Service), and legitimate interests (for security and improvement).