Privacy

What is held

Reading the site signs you into nothing. Your theme choice stays in your own browser; your language choice is a cookie, so it travels with every request and the page comes back in the language you picked. The companies serving the page and its pictures see those requests, as any web host does.

Signing in creates an account here. It holds a username, made up for you and yours to change, the identifier your sign-in provider gives you, and the identifier Google gives that provider for you — and nothing else. The second is what lets you find your account here again if the sign-in provider were ever replaced. Your email address, name and picture stay with that provider; when your own account page shows them to you, it is reading them from your sign-in, not from anything kept here.

What you then do in a product is held as that product's records. What those are is a question for each product, and each answers it below.

Why it is held

To sign you in, and to keep you signed in.

To show the people you share something with who did what. A record with nobody's name on it cannot be questioned by the people it concerns.

Nothing here profiles you, advertises to you, or is sold or handed to anybody for their own purposes. The companies below hold something because they run part of the site, and for no other reason.

Who else holds it

Running the site means other companies handle part of it. Each holds what it needs to do its part, under its own policy.

• Kinde — Holds the account and the signed-in session, and is where your browser goes to sign in. The details this site shows come from here.
• Google — The account you actually sign in with. It tells the provider above who you are, and gives it the identifier this site keeps so your account can be found again if that provider is ever replaced.
• Convex — Holds every record a product writes, your username, and the two identifiers: your sign-in provider's, and Google's. Your browser reaches it directly.
• Vercel — Serves the site, and sees the requests that arrive.
• Cloudinary — Serves the pictures on this site straight to your browser, so it sees each request for one, the way any image host does. Nothing about your account reaches it.
• PostHog — Counts visits: which page, from where, on what kind of browser. It sets no cookie and stores nothing on your device, so it cannot tell that today's visitor was yesterday's.
• Sentry — Receives an error this site hits while you use it: which page, what failed, and your browser's language and time zone. It is sent no cookie and nothing about your account, and is told not to record the address the report came from.

How long it is kept

For as long as the account exists. Nothing is deleted on a schedule.

The account ends when you end it, on your account page. If it is ever deleted where you sign in, the provider says so and the same erasure runs here.

What erasure leaves behind is what other people share with you. A record two people made together does not belong to one of them alone, so it stays — under the username it always carried, which says nothing about you once the rest is gone.

What you can do

Take a copy. Your account page hands you a file of everything held about you, whenever you ask for it.

Leave one product and keep the account, if you use another.

End the account. Every product lets go of you, and the two identifiers that tie it to you are cleared. What stays is the username on the records other people share with you, and nothing can sign in as it again.

Stop this site reading your details at all, by withdrawing its access where you sign in.

Reaching a person

This site is run by Eduardo Aguilar, in Mexico City. Write to help@unravelism.com. One person reads it, so an answer may take a few days.