Privacy Policy

1. Introduction

Owlect (“we,” “our,” or “us”) is a collection tracking application that lets you catalog, organize, and share your personal collections. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

2. Information We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture. This is used solely to identify your account and display your profile within the app.

Collection data

You create collections and items with titles, descriptions, custom field values, and images. All of this content is provided by you and stored on our servers so you can access it across devices.

Images

Photos you upload are processed (resized and compressed) and stored on Cloudflare R2. We generate thumbnails and cover images automatically. Images are served from our CDN and are accessible via direct URL.

Usage data

We collect basic analytics through Vercel's built-in tooling, such as page views and request logs. We do not use third-party tracking scripts or advertising pixels.

3. How We Use Your Information

• Authenticate your account via Google Sign-In
• Store and display your collections and items
• Generate shareable links and QR codes for public collections
• Process and serve your uploaded images
• Track referral codes for the referral program
• Improve the service and fix bugs

4. Data Storage & Security

Your data is stored in a Neon PostgreSQL database. Images are stored on Cloudflare R2 (S3-compatible object storage). Both services use encryption at rest and in transit. We do not sell, rent, or trade your personal information to third parties.

5. Public Collections & Sharing

When you enable sharing on a collection, its name, description, items, and images become publicly accessible via a unique link and QR code. Your display name is shown as the collection owner. You can disable sharing at any time, which immediately removes public access.

6. Cookies & Local Storage

We use a session cookie for authentication and localStorage to save your theme preference (light/dark), language setting, and view mode. We do not use cookies for advertising or cross-site tracking.

7. Data Retention & Deletion

Your data is retained for as long as your account exists. When you delete a collection or item, the database records are removed immediately and associated images are cleaned up from storage. If you wish to delete your entire account and all associated data, please contact us.

8. Third-Party Services

• Google — authentication (OAuth 2.0)
• Vercel — hosting and serverless functions
• Neon — PostgreSQL database
• Cloudflare R2 — image storage and CDN

Each provider has its own privacy policy governing how they handle data.

9. Children's Privacy

Owlect is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of Owlect after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy or your data, reach out to us at support@owlect.app.