Privacy Policy

We collect only what is needed to run the service:

• Account information. When you sign in with Google, we receive your email address, your name, and your Google account identifier. We do not receive your Google password.
• Profile. A username (handle) that is assigned automatically and that you can change, and your default post visibility preference.
• Content you create. The logs you write — titles, notes, ratings, categories, and music details such as artists, albums, genres, and credits — along with favorite rankings and the edit history of your logs.
• Social data. Friend requests, friendships, and the visibility setting (private or friends) you choose for each log.
• Technical data. Strictly necessary cookies that keep you signed in, a cookie that stores your light/dark theme preference, and standard server logs (such as IP address and browser type) kept by our hosting provider for security and reliability.

• To provide and operate Impasto and your account.
• To store, display, and let you manage your logs, rankings, and profile.
• To enable friend connections and to show friends only the logs you choose to make visible to them.
• To keep the service secure and to prevent abuse.

We do not sell your personal information, and we do not use it for advertising. We do not use analytics or advertising tracking cookies.

We use cookies only for purposes that are essential to the service: an authentication session cookie that keeps you signed in, and a preference cookie that remembers your theme. We do not use cookies for advertising, profiling, or third-party tracking. Because these cookies are strictly necessary or functional, the service relies on them to work as intended.

We share your information only with service providers that help us run Impasto, and only as needed:

• Supabase — database and authentication; stores your account, content, and friendships.
• Google — sign-in provider used to authenticate you.
• Vercel — hosting and content delivery for the website.

Logs you mark as visible to friends are shown to your accepted friends. Logs marked private are visible only to you. We may also disclose information if required by law.

We keep your information for as long as your account is active. When you delete a log it is removed from your feeds; residual copies may remain in revision history or backups for a limited period before being purged. You can ask us to delete your account and associated data at any time (see “Your rights”).

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. You can edit or delete most of your content directly in the app. To request access to or deletion of your account, contact us at the address below.

Your data is protected with row-level security so that, by default, only you can read and write your own records, and friends can see only the logs you have chosen to share. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Impasto relies on the providers listed above, which may process and store data in countries other than your own. Where required, such transfers are carried out with appropriate safeguards.

Impasto is not directed to children under the age of 14, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Significant changes will be communicated within the app where appropriate.

If you have any questions about this Privacy Policy or your data, contact us at jaewon1430@gmail.com.