1. Introduction

At Feelr.xyz ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Handle: A username you choose (3-20 characters)
• Content: The text of posts you share (up to 500 characters)

2.2 Information Automatically Collected

• IP Address (Hashed): We collect and hash your IP address for rate limiting purposes. The original IP is never stored.
• Country Information: We use your IP address to determine your approximate country location (via ipapi.co) to display a country flag with your posts.
• Timestamps: The date and time when you create posts

2.3 What We DON'T Collect

• No email addresses
• No phone numbers
• No names or personal identifiers
• No tracking cookies
• No browsing history
• No device fingerprinting
• No third-party analytics trackers

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To display your posts on the public feed
• Rate Limiting: To prevent spam by limiting posts to one every 5 minutes per IP
• Moderation: To review reported content and enforce our Terms of Service
• Geographic Display: To show country flags next to posts for cultural context
• Service Improvement: To understand usage patterns and improve the platform

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with the following protections:

• All data is encrypted in transit (HTTPS/TLS)
• Database access is restricted and authenticated
• IP addresses are hashed using SHA-256 before storage
• Row-level security policies are enforced
• Regular security updates and monitoring

5. Data Retention

• Posts: Automatically deleted after 30 days
• Reports: Retained for moderation purposes, reviewed periodically
• IP Hashes: Retained for rate limiting purposes only

6. Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information. We may share information only in these limited circumstances:

• Public Display: Posts are visible to all users (this is the core function of the service)
• Service Providers: Supabase (database hosting) and ipapi.co (geolocation) as necessary to operate the service
• Legal Requirements: If required by law, court order, or legal process
• Safety: To protect the rights, property, or safety of Feelr.xyz, users, or the public

7. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication services (see Supabase Privacy Policy)
• ipapi.co: IP geolocation service (see ipapi.co Privacy Policy)
• Vercel: Hosting and deployment (see Vercel Privacy Policy)

8. Your Rights (GDPR Compliance)

Under GDPR and other privacy laws, you have the following rights:

• Right to Access: Request a copy of your data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data

To exercise these rights, contact us at: privacy@feelr.xyz

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Cookies and Tracking

We do NOT use cookies for tracking or advertising purposes. We may use minimal session storage for technical functionality only.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@feelr.xyz
• Website: feelr.xyz

14. Data Protection Officer

For privacy-related inquiries or to exercise your rights, you may contact our Data Protection Officer at: dpo@feelr.xyz