Privacy Policy

1. Introduction

Welcome to IndieRadar (“we,” “our,” or “us”). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at indieradar.app and our email newsletter service (collectively, the “Service”).

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you sign up for IndieRadar, we collect the following information:

• Email address — Required for account creation and newsletter delivery
• First name — Used to personalize your experience (optional)
• Timezone — Used to deliver newsletters at your preferred local time
• Content preferences — Categories of content you want to receive

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• Browser type and version
• Device type
• Pages visited and time spent
• Referring website
• IP address (anonymized for analytics)

3. How We Use Your Information

We use the information we collect to:

• Deliver personalized daily newsletters based on your preferences
• Send you transactional emails (account confirmation, password reset, etc.)
• Improve and optimize our Service
• Analyze usage patterns to enhance user experience
• Communicate important updates about our Service
• Prevent fraud and ensure security

4. Email Communications

By signing up for IndieRadar, you consent to receive:

• Daily newsletters — Curated content based on your preferences, sent at your chosen time
• Transactional emails — Magic links for login, account confirmations
• Service announcements — Important updates about features or policy changes (rare)

You can pause or unsubscribe from newsletters at any time through your dashboard settings or by clicking the unsubscribe link in any email.

5. Data Storage and Security

We take the security of your data seriously:

• Your data is stored securely on Supabase infrastructure with encryption at rest
• All data transmission is encrypted using SSL/TLS
• We use passwordless authentication (magic links) to eliminate password-related vulnerabilities
• Access to user data is strictly limited to essential personnel
• We regularly review and update our security practices

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service providers — We use trusted third-party services (Supabase for data storage, Resend for email delivery, Vercel for hosting) that have access to your data only to perform specific tasks on our behalf
• Legal requirements — If required by law, subpoena, or legal process
• Safety — To protect the rights, property, or safety of IndieRadar, our users, or others

7. Cookies and Tracking

We use minimal, essential cookies for:

• Authentication — To keep you logged in
• Analytics — Anonymous usage data via Vercel Analytics (privacy-focused, no personal tracking)

We do not use third-party advertising cookies or tracking pixels.

8. Your Rights

You have the following rights regarding your personal data:

• Access — View all data we have about you in your dashboard settings
• Correction — Update your information at any time through your dashboard
• Deletion — Delete your account and all associated data from the settings page
• Portability — Request a copy of your data by contacting us
• Opt-out — Pause or cancel your newsletter subscription at any time

9. Data Retention

We retain your personal information for as long as your account is active. Newsletter history is retained for 30 days for your reference. When you delete your account, we remove all your personal data within 30 days, except where retention is required by law.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers (Supabase, Vercel, Resend) have data processing agreements and comply with applicable data protection regulations, including GDPR where applicable.

11. Children's Privacy

IndieRadar is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us, and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@indieradar.app