Privacy Policy
This site
This splash site (vulpilux.app) collects nothing. No analytics, no cookies, no tracking pixels, no third-party scripts. The rest of this policy covers the apps we build under the Vulpilux name.
What we collect
Our apps collect only what is necessary to provide the service:
- A display name you choose at sign-up (you can change it later)
- Passkey credentials for authentication (public keys only)
- Email and phone if you choose to provide them
- Content you create within the app (listings, events, messages, and similar)
- Images you upload
Authentication
We use passkeys (WebAuthn/FIDO2) for authentication. No passwords are stored. Your biometric data never leaves your device. We only receive a cryptographic public key.
Data storage
All data is stored on our self-hosted server. We do not use third-party analytics, tracking, or advertising services. Your data is not shared with or sold to anyone.
If you provide an email address, we use it only to send you transactional messages related to your account and the app you're using (sign-in links, security alerts, notifications you've opted into, and similar). We do not send marketing email, and we do not share or sell email addresses.
We use a single email delivery provider (Resend) solely to deliver these messages. Every notification email includes a one-click unsubscribe link that lets you stop or adjust those messages without needing to sign in. You can also manage email preferences from inside the app once signed in.
SMS / Text messages
If you opt in to SMS notifications in one of our apps, your phone number is used only to send you the account-related text alerts you've selected (such as activity on things you've posted, direct messages, reminders, and similar). Message frequency varies with your activity. Message and data rates may apply. Reply STOP to any text to unsubscribe, or HELP for help.
Phone numbers and SMS opt-in information are never shared with third parties, affiliates, or partners for marketing or promotional purposes. We use a single SMS provider (Twilio) solely to deliver the notifications you requested.
Payments and donations
If you choose to send us a donation (for example, through the "Buy Us a Coffee" link on our About page), payment is handled by Stripe. We never see or store your full card details; Stripe processes the payment and returns only a receipt identifier and the amount to us.
Information you give Stripe during checkout (name, billing details, email) is governed by Stripe's own privacy policy at stripe.com/privacy. We retain basic donation records (amount, date, and any name or note you chose to include) for accounting and tax purposes.
Server logs
Like any web server, ours records operational logs of incoming requests, including IP address, user agent, and the URL requested. These logs are used only to run the service, detect abuse, and debug problems.
Data deletion
You can delete your account at any time from within the app you're using. When your account is deleted, all associated data (your profile and the content you've created) is permanently removed.
Cookies
Our apps use a single authentication cookie to keep you signed in. No third-party cookies are used. The cookie expires after 30 days of inactivity.
Contact
Questions about this policy? Reach out through the contact page of whichever app you're using, and we'll get back to you.