Privacy Policy

Last updated: February 27, 2026

What We Collect

When you create an account, we store your email address, display name, and a securely hashed password. When you use the app with analytics consent, we collect anonymous usage events to improve the product:

  • Page views (which pages you visit)
  • Copy events (which components you copy, and copy method)
  • Search queries (the search terms you enter)
  • Component saves and submissions
  • Sign-up and sign-in events

What We Don't Collect

  • We do not store your IP address
  • We do not use third-party tracking or advertising cookies
  • We do not sell or share your data with third parties
  • We do not track you across other websites

How Data Is Stored

All data is stored securely in Supabase (hosted on AWS) with row-level security policies. Your password is hashed and never stored in plain text. Analytics events are stored in a separate table and are not linked to your personal identity unless you are logged in at the time of the event.

Cookies & Local Storage

We use the following browser storage:

  • Authentication cookies — essential for keeping you signed in (set by Supabase Auth)
  • Cookie consent preference — stored in localStorage to remember your analytics choice
  • Theme preference — stored in localStorage for dark/light mode

We do not use any third-party cookies or tracking pixels.

Your Rights

You have the right to:

  • Decline analytics — Use the cookie consent banner to decline. No usage data will be collected.
  • Access your data — Contact us to receive a copy of all data associated with your account.
  • Delete your data — Contact us to request full deletion of your account and all associated data, including analytics events.
  • Change consent — Use the button below or "Manage Cookies" in the navigation menu to update your cookie preferences at any time.

Data Retention

Analytics events are retained for up to 12 months for product improvement purposes. Account data is retained for as long as your account is active. When you request account deletion, all associated data is permanently removed within 30 days.

Contact

For any privacy-related questions or data requests, please contact us at privacy@figmacopy.com.