1. Scope
This policy applies to the services provided by Posteruno (posteruno.com). For privacy-related questions, please contact [email protected].
2. Images and local projects
Local image imports, HEIC conversion, adjustments and PDF generation run in your browser. Editing or signing in does not upload these images to a Posteruno image server. Importing an image URL requests the file from its host, which may receive normal connection data such as your IP address. Editing drafts are saved automatically in this browser’s IndexedDB so you can continue after refreshing. Saved projects also stay in this browser, without account or cross-device sync. Other people using this browser may see them; clearing site data deletes them.
3. Accounts and sign-in
Email/password, email links and Google sign-in use Supabase to process your email, user identifier, sessions and verification records. Passwords are sent over an encrypted connection to the authentication service for verification and are not stored in project or feedback records. Google may supply basic profile details such as a name or avatar within the authorized scope. Resend delivers email confirmations, backup sign-in links and password reset emails. Your browser stores session information needed to stay signed in. Signing out does not delete local projects.
4. Feedback
Feedback includes type, message, source pathname, language and an optional reply email. Signed-in submissions also link to a user identifier. We may prefill your account email, but you can change or clear it. Project images are not automatically attached. A keyed address digest supports abuse throttling; the feedback table does not store raw IP addresses. Infrastructure providers may still keep request and security logs.
5. Purposes and providers
Account data provides sign-in and verification; feedback helps answer your requests and improve the service; necessary technical data supports security and reliability. We use Supabase, Google sign-in and Resend, subject to their respective privacy terms. This version has no GA4, advertising tracking or marketing email subscription. Before adding nonessential tracking, we will update this policy and obtain consent where required.
6. Retention and international processing
You manage local projects in your browser. Accounts and feedback currently have no automatic expiry and may remain until manually deleted or an applicable deletion request is fulfilled. Provider logs and backups follow their own retention mechanisms. The primary account and feedback database is hosted in the Supabase Sydney, Australia region (ap-southeast-2). This does not mean all processing occurs in Australia: edge functions, email delivery, Google sign-in, logs and service support may involve other regions. Supabase and Resend describe transfer safeguards, including standard contractual clauses where applicable, in their data processing addenda. Google handles sign-in data under its privacy policy and transfer frameworks. Applicability depends on the data, jurisdictions and service terms.
7. Your choices and rights
You can use the editor without an account, send anonymous feedback, omit a reply email and delete local projects or site data. Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, portability and complaint to a supervisory authority. Submit requests by support email or feedback; identity verification may be necessary. Account deletion involving shared authentication infrastructure requires checking its effects on other services first.
8. Support email
Messages to [email protected] are received by Resend. Support can access your sender address, message and any attachments you include to handle inquiries and privacy requests. The receiving domain is configured in North Virginia, United States. Support mail is managed manually; we have not configured automatic cleanup, and actual availability and retention are subject to the email provider’s mechanisms; do not send unnecessary sensitive information.
9. Updates
Material changes to features or data handling will be reflected here with an updated date. Additional notice or consent will be provided where legally required.
Contact
For privacy requests or service questions, email [email protected] or use Send feedback in the footer. Never send passwords, verification codes or unnecessary sensitive information.