Privacy Policy

Draft — review before relying on this policy.

What we collect

• Account data: your email address, display name and a salted password hash. We never store your password in plain text.
• Content you publish: catalog text, images and settings you add.
• Security records: sign-in sessions (a hashed session identifier, creation and expiry time, and your browser's user-agent string) and an audit log of important account and administrative actions. IP addresses used for rate limiting and audit records are stored only as salted one-way hashes.

What we do not do

• We do not run advertising or third-party tracking scripts.
• We do not collect visitor analytics on public catalogs.
• We do not process payments. Prices shown in catalogs are information provided by catalog owners.

Cookies

We use one essential, HttpOnly session cookie on the admin site when you sign in. Public pages set no cookies, except an optional cookie that remembers access to a password-protected project preview.

Storage and processors

Vexes runs on Cloudflare (Workers, D1 database and R2 storage). If transactional email is enabled, sign-in related emails are sent through the configured email provider.

Your choices

You can export your data and delete your account from Account settings in the dashboard. See the Terms for what deletion removes.

Contact

Use the details on the Contact page for privacy questions.