Privacy Policy
Last updated: April 15, 2026
Your privacy matters. This policy explains what data we collect, why, and how we handle it. No legal fog - just the straight answer.
What We Collect
Account info: Email address, username, and password (hashed - we never see it in plain text). You can optionally add a bio and build a Yossed avatar.
Activity data: Reviews you write, ratings you give, artists you follow, communities you join, and messages you send. This is the content you create on Yossed.
Usage data: Basic analytics like page views, feature usage, and session info. We use this to understand how people use the platform and to improve it.
Device info: Browser type, operating system, screen size. Standard web stuff that helps us make the site work well across devices.
What We Don't Collect
- We don't sell your data to advertisers
- We don't track you across other websites
- We don't share your personal info with third parties for marketing
- We don't read your DMs for advertising purposes
How We Use Your Data
- Personalization: Your taste profile (artists, ratings, vibes) powers your recommendations and feed
- Platform features: Reviews, follows, DMs, and communities need your data to work
- Improvements: Aggregate usage data helps us build better features
- Security: We monitor for abuse, spam, and unauthorized access
Authentication
We use Supabase for authentication. Your password is hashed and stored securely. We use session tokens to keep you logged in. We never store passwords in plain text.
Cookies
We use essential cookies for authentication (keeping you logged in) and basic preferences. We don't use tracking cookies or third-party ad cookies.
Third-Party Services
- Supabase: Database and authentication
- Spotify API: Music metadata (album art, artist info, track details)
- Render: Hosting
- Google Fonts: Typography
These services have their own privacy policies. We only share what's necessary for them to function.
Data Storage
Your data is stored on servers managed through Supabase (PostgreSQL). We use standard security practices including encrypted connections (HTTPS) and secure authentication.
Your Rights
- Access: You can see all your data through your profile and settings
- Delete: You can delete reviews, content, and your entire account
- Export: Contact us if you want a copy of your data
- Correct: Update your profile info anytime through settings
Children
Yossed is not designed for children under 13. We don't knowingly collect data from anyone under that age.
Changes
If we make significant changes to this policy, we'll notify users. The "last updated" date at the top always reflects the current version.
Contact
Privacy questions? Reach us at our contact page.