Privacy

• Account identity. If you sign up with email, we store your email address and a hashed password. If you continue with Google, we store the account identifier Google returns and the email attached to it. We never see your Google password.
• Anonymous sessions. You can build a page before creating an account. Doing so creates a real but nameless user record with no email attached, held in a cookie on your browser. It becomes a normal account only if you choose to add an email or link Google at the point you publish.
• Your page. Your handle, display name, bio, the blocks you add and their content, your theme, and whether the page is published, unlisted or private.
• Uploads. Images you add are stored as files. They are compressed in your browser before they leave it.
• Onboarding answers. The three answers in the setup questionnaire, stored so that reloading the page does not lose your progress.

A published page is public. Anything on it — text, images, links, your handle — is visible to anyone who visits the address, and to search engines that crawl it.

An unlisted page is reachable by anyone with the link but is deliberately kept out of our sitemap, so we are not the ones handing it to a crawler. That is not the same as private. A page you have not published is visible only to you.

• A session cookie set by Supabase Auth. It is what keeps you signed in — including for an anonymous draft — and the site does not work without it.
• A theme preference in your browser’s local storage, so the site remembers whether you chose light or dark. It never leaves your device.
• No advertising or tracking cookies. We do not set any, and we do not sell or share what we hold with advertisers.

We use Vercel Web Analytics to count page views and referrers in aggregate. It is cookieless and does not build a profile of you or follow you across other sites. We do not run Google Analytics or any advertising pixel.

• Supabase — database, authentication and file storage. Everything above except analytics lives here.
• Vercel — hosting and the analytics described above.
• Google — only if you choose to sign in or link with a Google account.

Your page and its content are kept for as long as your account exists. Deleting your account deletes your profile, your pages, your blocks and your published snapshot along with it.

Images that are uploaded but never end up on a published page are swept automatically once they are more than a day old. Abandoned anonymous drafts — started without an account and never published — may be removed.

To get a copy of what we hold, or to have your account deleted, write to social.owna@gmail.com.

OWNA is not intended for children under 13, and we do not knowingly collect anything from them. If you believe a child has created a page here, tell us and we will remove it.

If this policy changes in a way that affects what we collect or who processes it, the date at the top of this page changes and we will say so on the page rather than quietly editing it.

Questions go to social.owna@gmail.com, or via the contact page.