GENTLE EMBER
Your privacy
Version 2026-10-17
Private preview draft. Operator details and the final legal review must be completed before public registration or payments open.
Who is responsible
The operator’s legal identity and privacy contact must be supplied before accounts or payments open. This notice describes the implemented preview and the proposed independent account service.
Accounts and preferences
When enabled, Supabase verifies your email/password or Google sign-in. Gentle Ember stores your provider user ID, language, appearance, terms acceptance, the time you confirmed you are at least 18, and optional favorites permission. Passwords pass securely to the authentication provider and are not stored in Gentle Ember’s database. Account processing serves your requested account service; preferences remain until changed or the account is deleted. Authentication settings, provider region and transfer safeguards must be confirmed before launch.
Your saved cards are personal
Saving a card links its ID and save time to your account. These choices can reveal personal feelings, so saving requires separate explicit permission. We do not build an advertising profile from them. You can remove individual favorites, withdraw permission and clear them all, or delete your account. The owner sees aggregate favorite counts, not a list of named people and their feelings.
Optional audience measurement
When optional analytics is enabled, and only after you accept it, we count page visits, card views, flips, source-link clicks and theme visits. A random browser identifier changes each UTC day and is never joined to your account. We do not record your searches, email, exact location or IP address in product analytics. Active-browser records become eligible for deletion after 24 hours; daily totals after 400 calendar days including today. Cleanup runs at most hourly when analytics is used, and whenever the owner opens the console. Expired records can remain during periods of inactivity. Short-lived hashed event tokens suppress duplicate counts, and browser-based counters limit rapid events; these are eligible for cleanup within an hour. No raw browsing history is stored. Rejecting analytics leaves the cards and accounts available.
Security, services and retention
Cloudflare provides hosting and application storage. Supabase and its configured email service provide independent authentication when enabled; Google handles Google sign-in when selected. The site owner may use a separate, verified hosting identity to access the owner console. Security controls use a short-lived hash of the connection address to limit authentication attempts; it expires after a 15-minute window and is purged on the next authentication attempt or console request. Expired security records can remain during inactivity. Infrastructure providers may process connection/security logs under their own configured retention. Backups, processor agreements, email provider details and international transfer safeguards require operator confirmation before accounts or payments open.
Your choices and rights
Open Cookie settings at any time to withdraw analytics permission. Account settings offer data export, favorite removal and account deletion when the provider is configured. If the identity provider is unavailable during deletion, a pending deletion record prevents further account changes and lets you retry. Operator follow-up is needed if retrying does not complete the request. You may also request access, correction, erasure, restriction, portability or object where applicable. Withdrawing consent does not undo lawful earlier processing. Contact the operator below; you may complain to your local data-protection authority, including the Dutch Autoriteit Persoonsgegevens. We do not sell personal information or use targeted advertising.
Contact details are awaiting the operator’s launch setup.