Privacy Policy

This policy explains what .Takes collects, why, and the choices you have. It applies to our website and app.

What we collect

Anonymous voting: we issue a signed device token (a cookie on the web, stored securely in the app) so we can count one vote per person without an account. It isn’t linked to your identity.

Accounts (for commenting/posting): a display name, and either an email + password or the basic profile (name, email, avatar) from Google/Facebook if you choose social sign-in. Passwords are stored only as salted hashes.

Content & activity: the takes, comments, votes, upvotes, reports, and blocks you create — including any photo you attach to a take. Photos you post become publicly visible with the take.

Technical data: when you use the Service, our providers automatically receive standard information such as your IP address, browser or device type, and pages viewed, used to operate the Service, keep it secure, and understand aggregate usage.

Cookies & similar technologies

We use a small number of first-party cookies and similar storage — not for cross-site ad tracking. They cover:

• Anonymous voting — the signed device token that enforces one vote per person.
• Sign-in — a session cookie that keeps you logged in.
• Product analytics — first-party usage measurement (via PostHog), plus heatmaps and session recordings (via Microsoft Clarity) that show us what’s confusing so we can improve the app. Not used for cross-site advertising.

How we use it

To run the Service — show live results, attribute your posts, enforce one vote per person, power your profile and history, and keep the community safe (moderation — including automated scanning of uploaded photos — rate limiting, abuse prevention) — and to fix problems and improve the product.

Who we share it with

We don’t sell your personal data. We share it only with service providers who process it on our behalf to operate the Service, including:

• Hosting, database & image storage (Vercel, Supabase) — running the app and storing data, including uploaded photos.
• Image safety (Google Cloud Vision) — automatically scanning photos attached to takes to detect explicit or unsafe content before they go live.
• Product analytics (Vercel Web Analytics, PostHog, Microsoft Clarity) — usage measurement, funnels, heatmaps, and session replay to see how the app is used and improve it.
• Error monitoring (Sentry) — diagnosing crashes and bugs.
• Sign-in (Google, Facebook) — only if you choose social login.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the public.

Data security

We use reasonable technical and organizational measures to protect your information — including hashed passwords, signed tokens, encrypted connections, and access controls. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security.

Your rights & choices

You can export all your data as JSON and permanently delete your account and content at any time from your profile (see how to delete your account). Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of your data, and to object or lodge a complaint with a regulator. Contact us to exercise these rights.

Data retention

We keep your account data until you delete your account, after which we remove it (aside from copies in routine backups, which age out). Aggregate, de-identified vote tallies may be retained. We may keep limited information longer where needed to comply with legal obligations or resolve disputes.

International users

We operate from the United States, and our providers may process data there and in other countries. By using the Service, you understand your information may be transferred to and processed in countries with different data-protection laws than your own.

Children

The Service isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has provided us data, contact us and we’ll delete it. We have zero tolerance for child sexual abuse and exploitation — see our Child Safety Standards for what we prohibit and how to report it.

Changes to this policy

We may update this policy. If we make material changes, we’ll update the date above and, where appropriate, provide additional notice.

Contact

Privacy questions or requests? Contact us at privacy@dottakes.com.