Privacy notice

Our full privacy notice is being reviewed. Short version: we use your email to sign you in and to contact you about your account. We keep what you add (your page, products, posts) and count clicks on your links. Your page is public; purchase proof stays private and is seen only by our review team. We use Supabase (database) and Vercel (hosting) to run prefrs. We don’t sell your data.

To see where sign-up gets stuck, we record simple steps in our own database, such as “started sign-up” or “added a product”, with a random ID kept in a cookie on your device. These records don’t contain your email, name or the links you paste, and we use no advertising or third-party trackers. While you’re signed in, they’re linked to your account. The cookie lasts up to a year. Steps recorded while you’re signed out are deleted daily once they’re more than 90 days old.

Link activity (sends and clicks) is kept for 13 months, then reduced to daily counts. The website a click came from is kept for 90 days. If you use Instagram replies, the comment text and the commenter’s username are kept for 90 days. A daily job removes each once it’s past its limit.

When something breaks, we record which kind of page it was (such as “a creator’s post”, never the page’s address), an error code and the type of error, but never the error’s text. These records don’t include any account, cookie or IP address, and we delete them daily once they’re more than 30 days old.

If you sign up from a creator's badge, we privately record which page you came from. Only prefrs admins can see it.

If you report a page, we keep the reason and any note you write, not who you are, so the prefrs team can review it. A report is deleted along with the page it's about.

You can delete your account yourself: Profile → Delete my account. When you confirm, we delete your page, posts, products, lists, photos, purchase proofs, links, click history, sign-in, any Instagram connection, and the steps we recorded while you were signed in.

What stays for a while: your username, for 30 days, so nobody else can take it and pretend to be you. Copies can remain in our database backups until those backups are deleted, and our hosting and database providers keep short-lived technical logs (such as request IP addresses) under their own policies. Someone who already viewed a public photo may still have a copy in their browser's cache for up to a year.

During our pilot, prefrs is for people aged 18 and over.