Privacy Policy

What we collect

If you create an account (optional): your email address and name, handled by our authentication provider, Clerk. You can use most of ReefPicker — building, pricing, pre-flighting — without an account.

Your build: the parts you add are stored in your browser and in a shareable link. Saved builds are stored against your account (or an anonymous token) so you can return to them.

Affiliate clicks: when you click a retailer link, we log the event with a one-way hashed (not stored raw) IP for fraud/dedup purposes and basic referral data.

Analytics

We use privacy-friendly, aggregate analytics (Vercel Analytics) to understand which pages are used and how the site performs. It measures traffic in aggregate and does not build an advertising profile of you.

Advertising & measurement

To measure our advertising and show relevant ads, we use the Meta Pixel (and the Meta Conversions API). When enabled, these share limited event data (such as page views or that a build was started) with Meta so we can measure campaigns and reach people who’ve shown interest. These advertising tools are only loaded after you give consent — see our Cookie Policy. You can change or withdraw consent at any time.

Why we process it (legal basis)

To provide the service you ask for (your account, saved builds) and our legitimate interest in running and protecting the site (fraud prevention on affiliate clicks, aggregate analytics). Advertising/measurement via the Meta Pixel relies on your consent.

Where your data lives

Account data is processed by Clerk; build and catalog data is stored in Supabase (EU region); analytics by Vercel; advertising/measurement by Meta. These providers process data under their own terms.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to certain processing, and withdraw advertising consent at any time. To do any of these, contact us.

Retention

Account data is kept while your account exists. Anonymous saved builds expire automatically. Affiliate-click logs are kept only as long as needed for fraud prevention and reporting.