Privacy Policy

1. Overview

This Privacy Policy explains how PolarAuth ("we", "us", or "our") collects, uses, and shares information about you when you use our websites and services (the "Service").

2. Data We Collect

• Account Information. Name, email address, password hash (if you use email sign‑in), and profile details you provide.
• OAuth Data. If you sign in with Google or GitHub, we receive basic profile information and your email address from the provider, in accordance with their terms and privacy policies.
• Usage Data. Log files, device and browser information, timestamps, and interactions needed to operate and secure the Service.
• Payment Data. Purchases and subscription status are processed by our payment partner Polar. We do not store full payment card details. We may receive limited billing metadata (e.g., status, plan, last four digits) needed for receipts and account management.
• Support Content. Information you send to us in support requests.

3. How We Use Data

• Provide, operate, and improve the Service and its authentication features.
• Process payments, manage subscriptions, and prevent fraud via Polar.
• Communicate with you about updates, security alerts, and support.
• Comply with legal obligations and enforce our Terms.

4. When We Share Data

We share information with third parties that help us provide the Service, including: authentication providers (Google, GitHub), payment processor (Polar), hosting, analytics, and support vendors. We require such providers to use your data only for the services they perform for us and to protect it appropriately. We may also share information to comply with law, protect rights and safety, or in connection with a business transfer.

5. Cookies & Analytics

We use cookies and similar technologies for authentication, preferences, and security. You can typically disable cookies in your browser settings; however, some features may not function properly without them.

6. Data Retention

We retain information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary by data type and purpose.

7. Security

We employ reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your information. You may also have the right to object to processing and to data portability. Contact us to make a request, and we will respond in accordance with applicable law.

9. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

10. Changes

We may update this Privacy Policy periodically. Material changes will be posted here with an updated "Last updated" date. Your continued use of the Service after the changes take effect signifies acceptance.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@polarauth.app.