1. What we collect
When you sign in with Google we receive your email, display name, and profile photo URL — nothing more. When you create projects we store the project name, layer transforms, and the PNG bytes you upload.
2. Where it lives
Account + project metadata sits in Postgres on Supabase. Asset bytes (PNGs) sit in Cloudflare R2. Both are scoped per user via row-level security.
3. Who can see it
You. Charios staff have access to the database and storage for support and reliability. We don't sell, share, or monetise your data with third parties.
4. Analytics
We use Google Analytics (GA4) to understand which features get used. The data is aggregated and anonymous. You can opt out by blocking the tag in your browser.
5. Your rights
You can delete your account at any time from the dashboard — that removes your projects, assets, and profile. Email hello@charios.com for an export of your data.
6. Cookies
We set a Supabase session cookie to keep you signed in and a Google Analytics cookie for usage analytics. No tracking pixels, no third-party advertising cookies.
7. Contact
Questions? hello@charios.com.