Privacy Policy

PRIVACY POLICY Last updated: June 19, 2026 INTRODUCTION Polish Me Pink ("we," "us," or "our") operates polishmepink.com and its associated mobile-friendly web application (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what choices you have. By creating an account or using the Service, you agree to the practices described here. INFORMATION WE COLLECT Account information When you register, we collect your email address and a display name or handle. We do not store your password — authentication is handled by Supabase, which stores a hashed credential on our behalf. Stash and catalog data We store the nail polish information you add to your personal stash: polish names, brands, colors, purchase details, locations, usage logs, favorites, and notes. This data is yours and is tied to your account. Images you upload When you upload photos (e.g., polish swatch images), we store them in Cloudflare R2, a cloud object storage service. Images are accessible via a public URL associated with your account. Usage and activity data We log in-app actions (such as adding or removing polishes, viewing history, and audit events) to support features like usage history and stash analytics. These logs are stored in our database and are visible to you within the app. Payment information If you subscribe to the Collector plan, payment is processed by Stripe. We receive a confirmation of your subscription status but do not store your credit card number or payment details — those remain with Stripe. Analytics We use Vercel Analytics, a privacy-focused analytics tool, to understand aggregate traffic patterns (pages visited, performance metrics). Vercel Analytics does not use advertising tracking, does not fingerprint individual users, and does not share data with advertising networks. Cookies and session tokens We use a session cookie to keep you logged in. See our Cookie Policy for details. HOW WE USE YOUR INFORMATION - To provide and operate the Service (your stash, catalog browsing, collections, history) - To send account-related emails (email confirmation, password reset) via our mail provider - To process and manage your subscription via Stripe - To understand how the Service is used in aggregate (via Vercel Analytics) - To improve features and fix bugs - To respond to your support requests We do not sell your personal information. We do not use your data for advertising targeting. THIRD-PARTY SERVICES We use the following third-party services to operate the app: - Supabase (supabase.com) — database hosting and authentication - Vercel (vercel.com) — application hosting and analytics - Cloudflare R2 (cloudflare.com) — image storage - Stripe (stripe.com) — payment processing - Resend (resend.com) — transactional email delivery Each of these providers has its own privacy policy and data processing terms. We only share the minimum data necessary for each service to function. DATA RETENTION We retain your account and stash data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records). YOUR RIGHTS Depending on your location, you may have the right to: - Access the personal data we hold about you - Correct inaccurate data - Request deletion of your data (you can delete your account from your Account Settings page) - Export your stash data (CSV export is available from your stash) - Withdraw consent (where processing is based on consent) To exercise any of these rights, contact us at the address below. CHILDREN The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it. CHANGES TO THIS POLICY We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or a prominent notice in the app. CONTACT Questions about this policy? Email us at: hello@polishmepink.com