Privacy Policy

Who we are

Porta.pics (“we,” “us”) operates the website and services available at our domain (the “Service”). This policy describes how we handle personal information when you use the Service.

Sign-in with Google

If you choose to sign in or link your account with Google, Google’s OAuth sign-in flow runs on Google’s systems subject to Google’s Privacy Policy. We receive authentication-related information through our authentication provider, Supabase, which processes data on our behalf as described under Service providers below.

Depending on your Google account settings and the information Google makes available for sign-in, we may receive categories such as:

• A stable Google account subject identifier;
• Email address;
• Name and profile picture URL; and
• Technical tokens and related metadata needed to keep you signed in securely.

We use this information only to:

• Create and log you into a Porta.pics account;
• Maintain your session and protect account security;
• Optionally pre-fill profile details you can review and change in your account settings; and
• Support linking or unlinking Google sign-in where the product offers that option.

We do not sell personal information obtained through Google sign-in to data brokers. We do not use Google sign-in data for targeted advertising, creditworthiness decisions, or to train generalized machine-learning or artificial-intelligence models unrelated to providing and securing the Service (including proportionate fraud and abuse prevention).

Retention and deletion of account data obtained through Google sign-in follow the Retention and Your rights and choices sections below.

Information we collect

Depending on how you use the Service, we may process:

• Account and authentication data — such as email address, authentication identifiers, and sign-in method when you register or log in. We use Supabase for authentication. If you choose Google sign-in, see Sign-in with Google above for what we receive and how we use it.
• Profile information — such as display name, public username, profile bio, avatar image, and preferences you save in your account (for example, settings related to how content is shown to you).
• Content you submit — photos, titles, captions, tags, field notes, and other information you attach to posts. Submitted content is generally stored and may be displayed publicly after moderation rules are applied.
• Location and place information — when you add a location to a post, we store the information you provide (for example, place names or coordinates from place search). That data may appear on posts and maps.
• Interactions — such as votes or similar engagement tied to your account where the product supports it.
• Technical data — such as IP address, device and browser type, and diagnostic data logged by our hosting and infrastructure providers when you access the Service.
• Support and feedback — information you send when you report an issue, request a feature, or contact us.

How we use information

We use the information above to:

• Provide, operate, and improve the Service;
• Create and maintain your account and profile;
• Display user-generated content and profiles to other users and visitors;
• Moderate content, enforce our terms, and protect users and the Service;
• Communicate with you about the Service (for example, authentication emails);
• Analyze reliability, security, and usage in aggregate or de-identified form where appropriate.

Legal bases (EEA / UK users)

Where applicable privacy law requires a “legal basis,” we rely on one or more of: performance of a contract (providing the Service), legitimate interests (security, product improvement, and moderation), consent where we ask for it, and compliance with legal obligations.

How we share information

We share information with:

• Service providers — vendors that host data, run authentication, store files, or provide infrastructure (for example, Supabase for database and auth, and our hosting provider). They process data on our instructions and for the purposes described here.
• Other users and the public — content and profile elements you choose to make public are visible as part of the Service.
• Legal and safety — when we believe disclosure is required by law, to protect rights and safety, or to enforce our policies.

We do not sell your personal information in the conventional sense of selling lists to data brokers. If we use advertising or analytics tools that qualify as “sale” or “sharing” under U.S. state laws, we will describe that and offer any choices those laws require.

Retention

We keep information for as long as your account is active and as needed to operate the Service, comply with law, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize associated personal data within the timeframes described in the product (for example, where the Service states removal within a short window), subject to backup and legal retention needs.

Security

We use industry-standard measures appropriate to the nature of the Service. No method of transmission or storage is completely secure.

International transfers

We may process data in countries other than where you live, including where our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. You can manage some information in your account settings. You may also contact us through the channels we provide (for example, Report an issue).

Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children in violation of applicable law.

Changes to this policy

We may update this policy from time to time. We will post the updated version and revise the “Last updated” date. Continued use of the Service after changes means you accept the updated policy, to the extent allowed by law.

Contact

For privacy-related requests, contact us through Report an issue or the contact method we publish on the Service.