Privacy Policy

This policy explains what personal data Unfaded collects, why, and the choices and rights you have. It covers the Unfaded website and web app, the browser extension and the Unfaded app for iPhone. Unfaded (“we”, “us”) is operated by Tiny Agency ApS (CVR 44 55 56 89), Denmark. We are the data controller for the personal data described here. Questions: hello@unfaded.io.

What we collect

• Account data: your email address.
• Content you save: the links, notes, text, images, uploaded files, filenames, titles, tags, and related metadata you add to your library, whether you save them on the web, with the browser extension or from the iPhone app.
• Technical data: limited request logs and IP address, used to keep the service running securely and to rate-limit abuse.
• Cookies and device storage: session cookies keep you signed in. The optional browser extension stores its API key, service URL and the email of the connected account in its local storage in that browser profile on your device; it is not synchronized through your browser account (versions before 0.2 used Chrome sync storage and move it to local storage on update). Disconnect in the extension options and revoke the key in Settings when you no longer want extension access. The iPhone app keeps your sign-in session and its own device key in the iOS Keychain on your phone (see The iPhone app below). The Unfaded app, the browser extension and the iPhone app do not load advertising or analytics tools (for our marketing website, see Website analytics below). Bot protection, when enabled, is used for sign-in security. These functions are necessary to provide the service you request.

The iPhone app

• Signing in: you sign in with your email address and a 6-digit code we email you. If no account exists for that address, signing in creates one.
• Your device key: after you sign in, the app creates an API key for that phone, shown in Settings as “Unfaded iOS app”. The key stays in the iOS Keychain on your phone; we store only a hash of it. Signing out revokes the key. You can also revoke it in Settings on the web.
• Saving from the share sheet: when you share a link, a web page, text or an image to Unfaded, the app sends it to your library. It does not read anything you have not chosen to share.
• Photos: photos can contain embedded details such as where they were taken. When you share an image from the iPhone app, its location and other camera metadata are removed before it is saved. We do not store them.
• No tracking: the app contains no advertising, analytics or crash-reporting tools and does not use your device's advertising identifier.
• Deleting your account: you delete your account in Settings on the web or in the iPhone app. Deleting the app alone does not delete your account.

Why we use it, and our legal basis

• To provide the service (store and show your library, authenticate you, save from the extension and the iPhone app) - performance of our contract with you.
• Security and abuse prevention (rate limiting, logs) - our legitimate interest in keeping the service safe.
• Essential emails (sign-in links and codes, account notices) - performance of our contract with you.
• Website analytics (aggregated, cookieless visit statistics on our marketing website) - our legitimate interest in understanding which pages and buttons work.
• Product-update emails - only if you opt in; based on your consent, which you can withdraw at any time.
• Rights requests and recovery erasure evidence - compliance with our obligations under data protection law.

Website analytics

On our marketing website (unfaded.io, not the Unfaded app, the browser extension or the iPhone app) we use Vercel Web Analytics to count page views and clicks on our sign-up and “Add to Chrome” buttons. It sets no cookies and only gives us anonymous, aggregated statistics. Vercel Inc. processes this data as our data processor in the United States, under appropriate safeguards for international transfers. The Unfaded app, the browser extension and the iPhone app contain no analytics. Your saved items and account data are stored in the EU.

Where your data is stored

Your account data and saved items are stored in the European Union (our database, file storage, and authentication run on Supabase in the eu-west-1 region, Ireland). Some service providers below may process limited data outside the EU through delivery, support, or infrastructure operations. EU storage does not exclude such transfers. Contact us for the providers, destinations, and safeguards applicable to your data, and a copy of any relevant contractual safeguards.

Recipients and service providers

We share data only with providers that help us run Unfaded:

• Supabase - database, file storage, and authentication (EU region).
• Vercel - application hosting, content delivery, the separate encrypted erasure journal, and cookieless analytics on our marketing website (United States).
• Resend - sending sign-in and (if opted in) product emails.
• Google - the server may request a site icon from Google using the saved site's hostname.
• Cloudflare - bot/abuse protection on the sign-in form, when configured. It receives technical browser and request information.
• Apple - if you use the iPhone app, Apple provides the App Store, the iOS Keychain and the share sheet under its own privacy terms. We do not send your library to Apple.

When you save or refresh a link, our server requests that page and its preview images or icons from the site and relevant metadata services. They receive the requested URL and our server's IP address, rather than your browser's IP address for the icon. Do not save private URLs whose access tokens you do not want sent to the destination. API keys and MCP give tools you connect access to your library. Apps such as ChatGPT connect by asking you to sign in and allow access; they receive a token, never your API keys. Revoke a key or disconnect an app in Settings to end that access. Those tools process data under their own terms. We do not sell your personal data.

How long we keep it

We keep your account and saved content while your account exists. Moving an item to Recently deleted keeps it available for restoration; it is not permanently erased and there is no automatic trash expiry. Use Delete permanently or Empty trash in Settings to remove its database record and stored files. Standalone tags remain until you remove them or delete your account. Account deletion removes stored files first, then account data, items, tags, preferences, and API keys, including device keys created by the iPhone app. If file removal fails, we show an error and keep the account available for a retry; some files may already have been removed. An item or account whose permanent deletion has started is locked against new content, file uploads, and restoration until you retry and complete deletion.

Rate-limit counters are removed after their one-hour window by a sweep every 15 minutes. Supabase daily database backups on our Pro plan have a seven-day recovery window; they do not include the stored file contents. Deletion from the live service does not itself erase existing backup copies or provider security and delivery logs. Vercel's standard runtime-log history on our Pro plan is one day. Supabase's standard API and database log history on Pro is seven days. Resend publishes a 30-day standard email-history retention. These are provider history windows, not a guarantee about every internal security or billing record. Contact us for an applicable exception or a request involving provider records.

To prevent erased content returning after recovery, we record minimal account and item identifiers, request times and completion times in a separate encrypted erasure journal on Vercel. It contains no saved content or email addresses. Completed entries are retained for eight days and removed by a daily sweep; unfinished erasures remain recorded until resolved. If the journal is unavailable, permanent deletion stops before removing files. A restored backup remains isolated until the applicable erasures have been replayed and checked. Backups from before complete journal coverage cannot be reopened using this procedure.

Your rights

Under the GDPR you can access, correct, export, delete, restrict, or object to the processing of your data, and withdraw consent at any time. You can export your data and delete your account yourself in Settings on the web or in the iPhone app, or email hello@unfaded.io. Export includes all item statuses, tags, account profile, preferences, your retained erasure-request history, API key metadata (not secrets), and download links for stored files valid for seven days. Download those files before the links expire. We normally respond to rights requests within one month. You can withdraw product-email consent in Settings or through an unsubscribe link; this does not affect processing before withdrawal. You also have the right to complain to Datatilsynet or your local data protection authority. Providing an email address is necessary to create an account; saving content is optional.

Security

Data is encrypted in transit. Each account's data is isolated at the database level using access controls. API keys, including the iPhone app's device keys, are stored only as hashes. On iPhone, your sign-in session and device key are kept in the iOS Keychain.

Children

Unfaded is not intended for children under 16.

Changes

If we change this policy we will update this page and the date above. For anything else, contact hello@unfaded.io.