Privacy Notice

1. Who is responsible for your data?

EmbedCatalog is operated by Anton Maklakov, an individual operator based in Kazakhstan. For privacy questions, requests, or complaints, email aanthonymaxgithub@gmail.com.

2. Information we collect

Depending on how you use the service, we may process:

• Account information, such as your email address, user ID, authentication records, and account timestamps.
• Public profile information you choose to provide, such as a public username, display name, avatar, a Markdown profile description, and links to Twitter (X), YouTube, or GitHub.
• Project information you submit, including a project name, description, URL, tags, social links, images, embed content, moderation comments, and publication status.
• Custom embeds you create, including their titles, descriptions, status, and creation dates.
• The email address and subscription date when you sign up for the newsletter.
• Activity information, such as your upvotes and bookmarks of projects and embeds, and aggregate counters of project impressions, embed page views, and upvotes.
• Messages and support information you send to us by email or other contact channels.
• Technical information needed to provide and protect the service, such as device, browser, log, approximate location, and IP-related information processed by our providers.
• Analytics information, such as pages viewed, referral information, approximate location, device information, and interaction events, if Google Analytics is enabled and you consent where consent is required.

Please do not submit passwords, payment-card details, government identifiers, or sensitive personal data in project fields or messages.

3. Why we use information

• To create and authenticate accounts, provide account features, and keep the service secure.
• To store, review, publish, display, and manage project submissions and embeds.
• To maintain newsletter subscriptions and send updates about projects and embeds to subscribers.
• To respond to requests, administer paid submissions, prevent abuse, and enforce our Terms.
• To understand service usage and improve the website through analytics where permitted.
• To comply with legal obligations and establish, exercise, or defend legal claims.

4. Legal bases

Where the GDPR or a similar law applies, we rely on contract or steps requested before contract for accounts and submissions, legitimate interests for security and service administration, consent for newsletter subscriptions and non-essential analytics, and legal obligations where applicable. You may withdraw consent at any time by contacting us; withdrawal does not affect earlier processing.

5. Service providers and public content

We use Supabase for authentication, database hosting, and related infrastructure. Supabase may process account, project, and newsletter subscription data on our behalf. We may use Google Analytics for measurement if it is enabled. Google and Supabase process data under their own terms and privacy documentation. We use Resend as our SMTP provider to send authentication emails (such as sign-in links); Resend receives your email address and the message content for this purpose. We may also use hosting, email, payment, security, and legal providers as needed to operate the service.

We use hCaptcha, provided by Intuition Machines, Inc., to help protect the platform against automated abuse. When a CAPTCHA check is performed, hCaptcha may process your IP address, browser and device information, and interaction data, and may use cookies or similar technologies. This processing is subject to hCaptcha's Privacy Policy.

Published project information, project URLs, social links, embeds, and other content selected for publication are public and may be indexed, copied, cached, or displayed by third parties. Your public profile (username, display name, avatar, description, social links, and your approved embeds) is public, as are upvote and view totals shown on projects and embeds. Your individual upvotes and bookmarks are not shown publicly. Embed images are served from public URLs and can be embedded on other websites. Do not submit information you want to keep private.

6. Cookies, analytics, and external links

The service may use essential cookies or local storage for authentication, security, preferences, and basic operation. We also use browser session storage to avoid counting the same view repeatedly and to batch impression counts. If Google Analytics or another non-essential tracker is used, we will request consent where required and provide a way to refuse or withdraw it. External websites, including project websites and social networks, have their own privacy practices and are not controlled by us.

7. Retention and security

We retain account data while your account is active and for a reasonable period afterward where needed for security, legal, accounting, dispute, or backup purposes. Published content may remain in backups or third-party caches for a limited period after removal. Newsletter email addresses are retained while subscribed and deleted when you request removal. We use reasonable technical and organizational measures, but no internet service can guarantee absolute security.

8. Your rights

Subject to applicable law, you may request access to, correction or deletion of, restriction of, or portability of your personal data, and you may object to processing or withdraw consent. You may also complain to the data-protection authority in your country. Contact us at the email above; we may need to verify your identity and will respond within the period required by law.

9. International transfers and children

Our providers may process information in countries other than Kazakhstan or your home country. We use contractual or other safeguards where required by applicable law. The service is not directed to children under 13, or the higher minimum age required where you live. If you believe a child provided personal data, contact us.

10. Changes

We may update this Notice when the service or applicable requirements change. The revised version will be posted on this page with a new update date.