PRIVACY POLICY

Information we collect

• Account data — your email address and a securely hashed password (or, if you use Google/GitHub sign-in, the basic profile your provider shares), plus the display name, handle, bio, and avatar you choose.
• Content you create — products you submit (name, tagline, description, link, logo, category), the reviews and replies you write, and the claps you give.
• Usage & device data — privacy-friendly analytics (page views and key events such as sign-ups, submissions, claps, reviews, checkout starts, and purchase returns) and standard technical data your browser sends. For first-touch attribution, your browser reduces the landing source to a small category (for example, Google, ChatGPT, another referral, or direct) and the landing page to a broad group. We keep those categories in session storage for the current tab and attach them only to conversion events. CLAPSTORM does not retain the raw search query or full referrer URL in this attribution record. At sign-up we store a one-way salted hashof your IP address (never the address itself) to detect and prevent fake accounts and vote manipulation — used only for fraud prevention and keeping the board fair (our legitimate interest). Your IP is otherwise processed transiently (e.g. the bot check) and is not stored for analytics.

How we use it

• To run the leaderboard — show launches, tally claps, and crown weekly winners.
• To authenticate you and send account email (email verification, and password resets if you request one).
• To prevent spam, fraud, and abuse, and to keep the board fair.
• To understand aggregate usage so we can improve the product.

Service providers

We don’t sell your data. We share it only with the providers that run CLAPSTORM, each acting on our behalf:

• Convex — backend database and file storage.
• Vercel — website hosting and privacy-friendly web analytics.
• Better Auth — authentication and session management.
• Resend — delivery of account emails.
• Cloudflare Turnstile — bot detection on sign-up, reviews, and replies.

Cookies

We use a small number of cookies: an essential sign-in/session cookie (required to keep you logged in) and an optional preview-access cookie. We also use session storage for the coarse first-touch categories described above; it is scoped to your current browser tab and is cleared when that tab’s session ends. Essential cookies are needed for the site to function; you can block cookies in your browser, but sign-in won’t work without the session cookie. Blocking browser storage does not stop you using CLAPSTORM.

Where your data is stored

Your data is stored on our providers’ infrastructure (our database is hosted in the European Union) and served via global content-delivery networks. By using CLAPSTORM you understand your data may be processed in these locations.

Your rights & choices

• Access & correct — view and edit your profile any time in your settings.
• Delete — delete your account from settings (this permanently removes your sign-in credentials and sessions, anonymises your profile, and hides your content), or email us to request erasure.
• Export — download a copy of your products, reviews, and claps from settings.

Depending on where you live, you may have additional rights (e.g. under the GDPR or CCPA). To exercise any right, contact us below.

Data retention

We keep your account and content while your account is active. When you delete your account we remove or anonymise your personal information; some records may be retained where required for security, legal, or anti-abuse purposes. Records of paid purchases are retained after account deletion where required for accounting, tax, and fraud-prevention purposes.

Children

CLAPSTORM isn’t directed at children under 16, and we don’t knowingly collect their data. If you believe a child has given us personal data, contact us and we’ll remove it.

Changes

We may update this policy from time to time. We’ll change the “last updated” date above and, for material changes, give notice in the app.

Contact

Questions or privacy requests? Email clapstorm@drizzlelabs.ltd or see our contact page.