Privacy Policy

This website is operated by Nathan Fennel as a personal website at nathanfennel.com. References to "we," "us," or "our" refer to Nathan Fennel personally.

Questions about this policy may be directed through the contact form.

Account Information

When you create an account (via GitHub OAuth or email magic link), we collect:

• Your email address
• Your name and profile photo (from GitHub, if applicable)
• The date you created your account and accepted these agreements

Content You Submit

Comments you post on blog posts and leaderboard entries you submit are stored and may be displayed publicly. If you upload photos (for approved users), those are stored in Amazon S3 and associated with your account.

Analytics

We collect anonymous usage data when you visit any page, including:

• Pages visited and time spent on each page
• Approximate location (country, region, and city level) derived from your IP address — your IP address itself is not stored
• Browser type, device type, and operating system
• A hashed, non-reversible identifier derived from your IP address and user agent, used only to count unique visits
• Referral source (e.g., which website linked to us)

This analytics data cannot be used to identify you personally and is not linked to your account.

• To authenticate you and maintain your session
• To display your comments and contributions alongside your name or display name
• To manage access permissions to private content (photos, albums)
• To contact you about your account if necessary
• To improve the website using aggregated, anonymous analytics

We do not use your information for advertising, automated profiling, or marketing.

We do not sell or rent your personal information. We share data only with the service providers necessary to operate the site:

• Supabase — database storage for your account, comments, and metadata
• Vercel — hosting and edge network
• Amazon S3 — photo and media storage (only for approved upload users)
• GitHub — OAuth authentication (only if you sign in with GitHub)

Each of these providers has its own privacy policy and is contractually obligated to protect your data.

We use a session cookie to keep you signed in. This cookie is essential to the authentication system and cannot be disabled without logging you out.

We do not use third-party advertising cookies. Preferences such as your chosen color theme are stored in your browser's local storage.

Your account and associated data are retained as long as your account exists. Anonymous analytics data is retained for up to 12 months for trend analysis.

Comments and leaderboard entries you post are retained until you or a site administrator removes them.

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated personal data
• Withdraw consent, which will result in termination of your account

To exercise any of these rights, please use the contact form. We will respond within 30 days.

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), role-based access controls, and use of service-role keys only on the server side. No system is perfectly secure; please contact us immediately if you believe your account has been compromised.

This website is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

We may update this Privacy Policy periodically. When we do, the "last updated" date at the top will change. Continued use of your account after a policy update constitutes acceptance of the revised policy. For material changes, we will notify you by email.