Privacy Policy

1. Information We Collect

When you use Ayris Beauty Machine, we may collect the following information:

• Account information: Email address, username, and password (hashed) when you register.
• Profile information: Avatar, display name, and other details you choose to provide.
• Content: Posts, images, comments, petitions, and other content you submit.
• Usage and technical data: Pages visited, features used, browser/device information, approximate location, and technical diagnostics generated when the site is used or an error occurs.
• Payment data: We do not process card payments ourselves and do not store your card details. Donations are handled by the platform or rail you choose: Open Collective Europe Foundation, Ko-fi, or a direct cryptocurrency transfer.

2. How We Use Your Information

• To provide and maintain the platform
• To authenticate your identity and manage your account
• To display your content and profile to other users according to the platform’s visibility rules
• To maintain donation and transaction records where applicable
• To calculate reputation scores and hierarchy levels
• To enforce community guidelines and platform rules
• To understand site use and diagnose technical problems

3. Data Storage & Security

Platform data is stored using Supabase (PostgreSQL, authentication, and file storage). Row Level Security (RLS) policies restrict database access according to the permissions defined for each table. Connections to the platform use HTTPS. Passwords are handled by the authentication provider and are not stored by Ayris Beauty Machine in plain text.

4. Third-Party Services

We use the following third-party services:

• Supabase: Database, authentication, and file storage.
• Open Collective Europe Foundation: Fiscal host; receives and holds eligible donations and grants on the project’s behalf.
• Ko-fi: Direct supporter rail for small recurring and one-off contributions.
• Vercel: Hosting and content delivery.
• Umami: Cookieless website analytics. Umami can provide anonymized analytics such as pages visited, referrers, browser/device information, approximate location, and anonymous session-level activity. We do not intentionally send Ayris account identities to Umami.
• Sentry: Error and performance monitoring. When something breaks, technical information such as the affected page, browser/environment details, request traces, and error context may be sent to Sentry so we can diagnose the problem.

Each service has its own privacy policy governing how it handles data.

5. Cookies & Authentication

We use essential cookies or equivalent browser storage needed for authentication and basic site behavior. One keeps you signed in. Another records that you have already passed the entrance page so returning visitors can go directly to the platform. We do not use third-party advertising cookies, and Umami analytics is configured without cookies.

6. Your Rights

Depending on applicable law, you may have rights including the ability to:

• Access personal data available through your account and profile
• Update or correct information you control
• Request deletion of your account through Account Settings
• Request an export of your content by contacting us
• Contact us about other applicable data-protection rights

7. Account Deletion & Data Retention

We retain platform data while your account is active, subject to operational and legal requirements. When you request account deletion, the platform attempts to remove the account’s uploaded files, user-created platform records, profile, and login. The login is removed only after the required platform-data deletion steps have completed.

Account deletion is not presented as complete unless the required deletion steps succeed. If a required step fails, the platform reports that deletion is incomplete instead of reporting success. Because deletion consists of multiple irreversible operations, some content may already have been removed before a later step fails; an incomplete deletion is therefore not a rollback. You can retry the deletion where the account remains accessible, or contact us so the remaining steps can be completed.

Financial, fiscal-host, payment-provider, or blockchain records may be retained outside the platform where required by law, accounting obligations, the relevant provider’s terms, or the technical nature of the payment rail. Platform-side donation records may also be kept in a non-account-identifying or legally required form where necessary for financial compliance.

8. Children

Ayris Beauty Machine is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. Age and consent requirements can vary by jurisdiction; where local law requires a higher age or additional authorization, those requirements apply. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this privacy policy as the platform, service providers, or legal obligations change. The current revision date will be shown on this page. Where applicable law requires additional notice or consent for a material change, we will provide it.

10. Contact

The Platform is operated under the Ayris Atelier studio name and fiscally hosted by Open Collective Europe Foundation. For questions about this policy, your data, exports, or deletion requests, contact info@ayrisbeautymachine.net.