Privacy Policy

1. Who we are

Naxatar ("we", "us") operates the website at naxatar.com and the associated authenticated services. You can reach us at support@naxatar.com.

2. What we collect

We collect the minimum information needed to run the service:

• Sign-in info via Google. When you sign in with Google we receive your email address, name, profile picture URL, and a stable Google account identifier. We do not receive your Google password.
• Account data you create. Any content you save while signed in (for example, notes) is stored against your account.
• Contact form submissions. If you message us through the contact form on the home page, we store the name, email, and message you provide.
• Operational logs. Our backend records standard server logs (timestamps, IP addresses, request paths) for security and debugging. These are kept for a limited period and then deleted automatically.

We do not use advertising trackers or third-party analytics SDKs on authenticated pages.

3. How we use it

• Identify your account and keep you signed in across page reloads.
• Display your name and profile picture inside the app so you know which account you're using.
• Store and retrieve content you create in the service.
• Respond to messages you send via the contact form.
• Investigate abuse, troubleshoot bugs, and meet legal obligations.

We do not sell your personal information, and we do not use it to train AI models.

4. Who processes it

We rely on a small set of vendors to operate the service:

• Google — identity provider for "Sign in with Google". Subject to Google's Privacy Policy.
• Supabase — managed Postgres database and authentication service that hosts our backend. Subject to Supabase's Privacy Policy.

Our data is stored in Supabase's hosted infrastructure. We have not transferred personal data to any other party.

5. Cookies and local storage

After you sign in, we store a session token in your browser's localStorage so you stay signed in across page reloads. The token is scoped to naxatar.com and is cleared when you sign out. We do not use third-party cookies.

6. Your rights

You can sign out of the service at any time. You can request a copy of the data associated with your account, or ask us to delete your account and the data tied to it, by emailing support@naxatar.com from the address associated with your account. We will action deletion requests within 30 days unless we have a legal obligation to retain the data.

Depending on where you live, you may also have additional rights under the GDPR, the UK GDPR, the CCPA, or similar laws. Contact us at the address above to exercise them.

7. Children

The service is not directed at children under 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has signed up, please contact us and we will delete the account.

8. Changes

We may update this policy from time to time. Material changes will be communicated via the service or by updating the "Last updated" date above.

9. Contact

Questions or concerns? Email support@naxatar.com.