Privacy Policy — Mon Flamme

This Privacy Policy explains what information Mon Flamme (“we”, “us”) collects when you visit or create an account, why we collect it, how we store it, and what rights you have over it. If you do not create an account, you can browse the archive without giving us anything more than the standard web-browser information every server sees.

1. What we collect

If you create an account, we store:

Email address — for sign-in, password reset, and essential service emails.
Password — stored only as a salted hash (bcrypt via Supabase Auth). We never see your plaintext password.
Display name and, optionally, a handle — used to identify your account and, if you opt in, to build your public share URL.
Pieces you catalogue — any text you enter about cookware you own (piece type, size, colour, country, year acquired, condition, notes, purchase price, purchase source).
Photos you upload — stored in Supabase Storage, linked to your account.
Short-lived session cookies — to keep you signed in. No advertising cookies; no cross-site tracking.

We do not collect payment information, device fingerprints, precise location, or data from third-party trackers. We do not use any analytics or advertising SDK at this time.

2. Why we collect it

To create and authenticate your account.
To show your collection to you when you sign in.
To render your public share page, only if you explicitly enable it in settings.
To email you password-reset links when you ask for them.

3. Who else sees it

Your personal data is accessible to youand, functionally, to the service providers that host our infrastructure. Row-Level Security policies in our database prevent other users from reading your items or photos unless you’ve opted in to public sharing. Our service providers are:

Supabase, Inc. — database, authentication, and file storage. Their privacy policy applies to data they process on our behalf.
Vercel Inc. — hosting and image optimisation. Their privacy policy applies.

We do not sell, rent, or trade your personal data. We will disclose it only if required by law (valid subpoena, court order) or to protect the integrity of the service.

4. Public share pages

By default, your collection is private. If you turn on “Make my collection public” in Settings, your display name, bio, handle, and any pieces you have not marked private will be visible at /u/<handle>to anyone with the link, including search-engine crawlers. Purchase prices are hidden from the public page unless you also opt in to the “Show purchase prices publicly” toggle.

5. Your rights

Access & export. You can see everything you’ve saved in your account at any time.
Correction. You can edit or delete any of your saved pieces or photos yourself.
Deletion. Email us at ivanovskiantonio354@gmail.com to close your account. We remove your profile, items, and photos within 30 days. Short backups may retain copies for up to 60 more days before being overwritten.
EU & UK users: you have additional rights under the GDPR including portability, restriction of processing, and lodging a complaint with your local supervisory authority.
California users: you have additional rights under the CCPA including the right to know and the right to delete. We do not sell personal information.

6. Children

Mon Flamme is intended for adults. We do not knowingly collect information from children under 13. If you believe a child has provided us data, contact us and we will remove it.

7. Cookies

We use only strictly necessary cookies — short-lived session cookies set by Supabase Auth to keep you signed in. No advertising cookies, no cross-site trackers, no fingerprinting. Because we use only strictly necessary cookies, no consent banner is required under ePrivacy or GDPR.

8. Changes

If we materially change this policy we will update the “Last updated” date at the top and, for any reduction in user rights, post a notice in the app. Continued use of the service after changes means you accept the updated policy.

9. Contact

Privacy questions or requests: ivanovskiantonio354@gmail.com.