Privacy Policy

Effective date: March 31, 2026

1. Overview

WeeklyMuse ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights with respect to it.

2. Information We Collect

We collect only what is necessary to operate the Service:

  • Email address — collected when you sign up with email/password or via OAuth (GitHub, Google, Discord).
  • OAuth identity — an identifier from your GitHub, Google, or Discord account used to link your account. We do access your third-party accounts beyond authentication.
  • Username — the display name you choose when setting up your profile.
  • Album submissions and votes — your activity within the Service.
  • Session data — a signed, encrypted cookie to keep you logged in. No persistent tracking cookies.

We do not collect payment information, precise location data, or any other personal data beyond the above.

3. How We Use Your Information

We use the information we collect to:

  • Authenticate you and maintain your session.
  • Display your username and activity on leaderboards and public profiles.
  • Send transactional emails (e.g. email verification, password reset).
  • Detect and prevent abuse.

We do not sell your data, use it for advertising, or share it with third parties except as described in Section 4.

4. Data Sharing

We share your data only in the following limited circumstances:

  • Resend — our transactional email provider. Your email address is shared only to deliver emails you requested.
  • OAuth providers (GitHub, Google, Discord) — only during the authentication flow. We do not share data back to them.
  • Legal obligations — if required by law or to protect the rights and safety of WeeklyMuse or its users.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete your personal data (email, username, OAuth identifiers, votes, and submissions) from our systems. Deletion is processed immediately upon your request.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Correction — request that inaccurate data be corrected.
  • Deletion — delete your account and all associated data via your profile settings.
  • Portability — request your data in a portable format.
  • Objection — object to certain processing activities.

If you are located in the European Union or European Economic Area, you have rights under the GDPR. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Minimum Age

WeeklyMuse is not intended for users under 16 years of age. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

8. Security

We use industry-standard practices to protect your data, including encrypted session cookies and hashed passwords. However, no system is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date. Continued use of the Service after changes are posted constitutes acceptance.

10. Contact

For privacy inquiries or to exercise your rights, contact us at [email protected].