Privacy Policy

Data Collection

Favly is committed to protecting your privacy. We do not collect any unnecessary personal information. The only data we store includes:

• Email address (for account creation and communication)
• Username (for your public profile)
• Password (encrypted and securely stored)
• Your favorite movies, books, games, and other content preferences

Data Storage & Security

All your data is securely stored using Supabase, a trusted cloud database service. We use industry-standard encryption and security measures to protect your information. Your passwords are never stored in plain text and are encrypted using secure hashing algorithms.

Third-Party Services

We use the following third-party services to provide our platform:

• Supabase: For backend services, authentication, and database storage
• Vercel: For hosting and deployment
• External APIs: For content discovery (TMDB, Google Books, IGDB)
• Google Analytics (GA4): For privacy-preserving product analytics — see “Analytics & Cookies” below
• Stripe: For payment processing on paid plans

These services have their own privacy policies, and we ensure they meet our security standards.

Analytics & Cookies

We use Google Analytics 4 (GA4) to understand how people use Favly so we can improve the product. GA4 sets first-party cookies / identifiers in your browser to recognise return visits and measure flows (for example, how many visitors create a profile or add their first work).

• When you are signed in, we associate analytics with a pseudonymous User-ID (your internal account ID), never your email, username, or profile content.
• We measure actions and outcomes (sign-up, first work added, share, checkout, purchase) — not the titles, reviews, search text, or files you add.
• We use analytics only for service improvement and product decisions, never to sell your data.

You can opt out by using the Google Analytics opt-out browser add-on, by blocking analytics cookies in your browser, or by enabling “Do Not Track”.

Data Usage

We use your data solely to:

• Provide and maintain your account
• Display your public profile and preferences
• Send important account-related communications
• Improve our service based on usage patterns (anonymized)

Your Rights

You have the right to:

• Access your personal data
• Update or correct your information
• Delete your account and all associated data
• Export your data
• Opt out of non-essential communications

Data Breach Response

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours
• Work with security experts to contain the breach
• Implement additional security measures
• Provide guidance on protecting your account