Privacy Policy

## Privacy Notice — English ### Scope and responsibility This notice describes the Free Textelling service at textelling.com, including private account-owned text projects using invented, non-sensitive content. The operator is an individual acting personally, based in Montréal, Québec, Canada. Contact: [email protected]. ### Information and purposes Supabase Auth processes the account email and verification/authentication records. Textelling uses the verified Auth user ID for account ownership and access checks and project ownership. Where account project storage is enabled after the required acceptance, the database stores supported text project content and metadata, applicable notice versions, and records of your own Terms acceptance and separate 16+ attestation. These records support account operation, access control and evidence of the notice accepted. Do not enter sensitive information or third-party personal information. Provider-managed sessions and security records may extend beyond the application tables. Necessary login and acceptance cookies support authentication and the acceptance flow. Browser project copies can remain on your device; closing server access cannot erase an offline device. This release does not activate paid billing, personal cloud-media uploads or public account MCP access. Page and asset requests pass through Cloudflare for delivery and security; operational and security records may include IP addresses, requested paths and security outcomes. ### Providers and processing locations The production Auth and account database project is hosted by Supabase in Canada (Central), ca-central-1. The application runs on the existing Hetzner server in Nuremberg, Germany, with Cloudflare in front of the website. Authentication email uses Resend through Supabase Auth. The database region does not establish every provider processing, support-access, security-record or backup location. These providers process information to deliver account storage, authentication, email, website delivery and security. Some processing takes place outside Canada, including on the application server in Germany. ### Retention, recovery and requests Account projects remain in active storage until you successfully delete them or complete account deletion. Terms-acceptance and 16+ attestation evidence is retained for 12 months after account closure, unless a lawful hold requires longer retention. A limited account-closure record is kept separately to prevent a deleted account from regaining access; it is not a live project or a copy of your project content. Security and operational records are separate from project content. Keep your own downloaded project copy: switching to an earlier application version does not restore deleted account data. Contact [email protected] about access, correction, export or deletion. We verify account ownership before disclosing personal data or carrying out a request. Downloading a project file is not a complete export of every provider-held account record. A project deletion is separate from account deletion and from removal of provider records or backups. Stopping access does not itself erase stored records, provider records, backups or browser copies. Do not send passwords, verification codes or tokens with a request. Textelling cannot remotely erase downloaded files or copies on an offline device. These contact instructions do not limit your rights under applicable privacy law.

Contact

Privacy Officer / Responsable de la protection des renseignements personnels
Email [email protected]