Privacy Policy
Last updated
This Privacy Policy explains what personal data ffuffix ("we", "us" or "our") collects when you use ffuffix.com (the "Service"), why we collect it, who it is shared with, and the choices you have. For any question or request about your data, contact support@ffuffix.com.
1. What we collect
- Account details. Your email address and a unique account identifier. If you sign in with Google, we also receive the name and profile picture on your Google account.
- Profile. Your username, profile picture, whether your profile is private, and your favorite species if you choose one.
- Agreement records. Which version of our Terms of Service, Privacy Policy and Community Guidelines you accepted, and when.
- Notes. The notes you post to the wall, together with the name and profile picture shown with them. If you post without signing in, we keep the name you type.
- Abuse prevention. When a note is posted, we store a salted, one-way hash of the IP address it came from, used only to limit how often notes can be posted and to prevent misuse. We do not store IP addresses themselves in our database. Sign-in attempts are rate limited by IP address and email address for a short time, without being stored by us.
Our hosting and infrastructure providers, listed in section 4, process IP addresses and technical request information in their own logs in order to deliver the Service and keep it secure.
2. Cookies and local storage
We only use cookies that are strictly necessary for the Service to work: to keep you signed in, to complete a sign-in, to remember for 15 minutes which address a sign-in code was sent to, to show a confirmation after you sign in, sign out or save a change, and to remember access to pages that require an access code. Scripts on the page cannot read them, with two exceptions: a marker set when you sign in and removed when you sign out, and a marker kept for up to a minute after you sign out. Each holds only the value 1 and nothing about you or your account. They let a page tell whether it needs to ask our server who is signed in, and are only ever set for someone who has signed in. None of our cookies is used for advertising or tracking. The site also keeps a small visit counter in your browser's storage to decide whether to show the welcome animation; it never leaves your device.
3. How we use your data
- To create and run your account and sign you in.
- To show your public profile and the notes you post.
- To moderate content, enforce our Terms and prevent abuse.
- To send you sign-in codes and important messages about your account or changes to these documents.
- To keep the Service secure, working and up to date.
We do not sell your personal data, and we do not use it for advertising.
4. Who we share it with
We use the following providers to run the Service. They process personal data on our behalf and only for that purpose.
- Supabase, for sign-in and the database. Our database is hosted in the European Union (Ireland).
- Cloudflare, for hosting, delivery and security.
- Resend, for sending email.
- Google, only if you choose to sign in with Google.
Some of these providers may process data in countries other than your own. We may also disclose data where the law requires it, or where it is necessary to protect the rights, safety or property of our users, the public or the Service.
5. What is public
Your username and profile picture are always public. Notes you post to the wall are public and show your username and profile picture. A private profile hides your friends list and other profile details from other people. Your email address and favorite species are never shown to anyone else.
6. How long we keep it
We keep your data for as long as your account is in use. We may delete an account and its data after an extended period of inactivity. When you ask us to delete your account, we delete your account, profile and notes within 30 days, except where the law requires us to keep something. Copies held in backups are removed when those backups expire.
7. Your rights
You can see and change your username, privacy setting and favorite species on your account page at any time. You may also ask us for a copy of your data, ask us to correct or delete it, withdraw any authorisation you have given, or object to how we use it, by emailing support@ffuffix.com. Depending on where you live, you may also have the right to complain to your data protection authority.
8. Security
We take reasonable technical and organisational measures to protect your data. Sign-in sessions are kept in cookies that scripts on the page cannot read, and access to stored data is restricted to the Service itself. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children
The Service is not intended for children under 13. If we learn that we hold personal data of a child under 13, or under the minimum age that applies in their country, we will delete it.
10. Changes to this policy
We may update this Privacy Policy. The date at the top shows when it last changed. If a change affects how we collect, use or share your data, we will tell you, for example by asking you to review and accept it the next time you sign in.
11. Contact
Questions and requests about your data can be sent to support@ffuffix.com.