Privacy Policy
We respect your privacy and are committed to being transparent about the data we collect, how we use it, and your choices. This page describes our practices for childsafe.media (the “Service”).
What We Collect
- Account & profile data: If you create an account, we store your email and basic profile information in our database (Supabase) to provide authentication and personalized features.
- Newsletter: If you subscribe, we store your email to send updates. You can unsubscribe anytime via a link in each email.
- AI chat content: Questions and responses from AI interactions (and optional feedback) are stored to operate the Service, improve quality, and detect abuse. For anonymous users, we link requests to a random client ID; for signed‑in users, to your account.
- Device & usage data: We collect aggregated analytics (page views, referrers, basic device data) and session experience events to understand usage and improve the Service.
- Random client ID: We store a randomly generated identifier in your browser storage to enforce fair‑use limits for anonymous requests. It does not identify you across other websites and can be cleared by deleting site data.
Parent Reviews
While you write a review, we save a draft in this browser. When you submit it, we keep a private copy linked to a hash of your email address until you confirm that address. Drafts expire after 30 days and expired copies are removed on subsequent submissions. We also use a protected hash of your network address to limit spam submissions. Published reviews and suggested ages are public and appear as “Parent”; your email is not displayed. Do not include children’s names or other personal details. Contact us to request removal of your review.
How We Use Data
- Provide and improve search, recommendations, and age guidance.
- Operate authentication, bookmarks, watchlists, and user settings.
- Measure performance and reliability; diagnose and fix issues.
- Prevent abuse and manage fair‑use limits for anonymous access.
- Send newsletters when you opt in (you can opt out anytime).
Analytics & Third‑Party Services
Vercel Web Analytics: We count public-page visits solely to improve the site. Basic counts start automatically for UK and US visitors unless they opt out; elsewhere we require acceptance. Where personal data is involved in these basic counts, we rely on our legitimate interest in understanding and improving site usage, or consent where required. Vercel provides aggregate statistics using a request-derived identifier discarded after 24 hours. We exclude private account pages and remove query parameters from page URLs. We do not link these counts to accounts, use them for advertising, or combine them with other trackers. Vercel processes data internationally, including in the US, under its data processing terms and applicable transfer safeguards. You can object and disable basic counts at any time on our Cookies & Local Storage page.
Google Analytics: With your consent, we use Google Analytics to measure aggregate site usage. We do not use analytics to build personal profiles. Google Analytics collects page views, referrers, device type, and similar metrics. We configure it with IP anonymization and without ad personalization signals.
Microsoft Clarity (experience insights): With your consent, we use Clarity to understand feature usage and usability. Clarity records anonymized interaction events and may capture session replays. We implement it to avoid sensitive fields and use it for product improvement only. See Microsoft’s privacy statement for details.
Supabase (database & auth): We use Supabase to store accounts, preferences, content records, and AI query logs. Authentication cookies are set by Supabase to keep you signed in.
Resend (email): We use Resend to manage newsletter subscriptions and email delivery.
External media APIs: For content data and images we call third‑party APIs (e.g., TMDB, Google Books, IGDB). Requests include only the minimum data needed to retrieve media details.
Cookies & Storage
- Authentication uses secure cookies (Supabase) to keep you signed in.
- A random client ID is stored in localStorage for anonymous rate limiting.
- You can clear both at any time via your browser’s site data settings.
Your Choices
- Newsletter: Unsubscribe via the link in any email or contact us to remove your address from our list.
- Analytics & Clarity: You can use browser or extension controls to block analytics or third‑party scripts if you prefer. We do not require analytics to use the core Service.
- AI chat data: Contact us if you want us to delete chat history associated with your account or client ID.
- Account data: You can update or delete your account. Deleting your account removes associated personal data except where we must retain limited records for legal or security reasons.
Data Retention
We retain personal data for as long as necessary to provide the Service and meet the purposes above. Newsletter emails are kept until you unsubscribe. AI chat logs are retained to support quality monitoring and can be deleted upon request. We may retain minimal records as required by law.
Contact
Questions or requests? Contact us at support@childsafe.media.