Privacy Policy

Information We Collect

Fins & Ferns may collect the following information when you use the service:

• Account data, including email address and OAuth name/avatar if provided by your login provider.
• Design data, including saved designs, shared designs, object layouts, tank settings, and metadata.
• Uploaded 3D assets, including model files, thumbnails, categories, and processing status.
• Usage and log data, including pages visited, feature usage, device/browser information, and errors.

How We Use Your Data

• To authenticate accounts and keep sessions active.
• To render, save, load, share, and export aquascape designs.
• To manage plan-based access when additional plans become available.
• To control access to free, premium/pro, and user-uploaded assets.
• To provide support, investigate bugs, secure the service, and improve product quality.

We do not sell personal data, serve third-party advertising, or use your private designs or uploaded assets to train AI models.

Third-Party Services

• Supabase provides authentication, database, and file storage for account, design, and asset data.
• Google OAuth may be used as an optional login provider and may provide account name, email, and avatar data.
• [Hosting provider] hosts the application and may process standard server, network, and request logs.

Cookies and Auth Sessions

Fins & Ferns uses required authentication/session storage so you can stay logged in and use account features. We do not use third-party advertising cookies. If analytics are added later, this policy will be updated before use.

Data Retention

Account data is retained while your account exists. Designs and uploaded assets are retained until you delete them or request account deletion, subject to backups and operational retention. Billing records may be retained as required by tax, accounting, fraud-prevention, and legal obligations.

Account and Data Deletion

You may request account deletion by contacting [Support email]. Deletion requests remove profile, design, and uploaded asset data where legally and technically possible. Records may be retained where required by law or necessary to protect the service.

Children and Minors

The service is not directed to children under 13 or the age of digital consent in your location. If we learn that a child provided personal data without appropriate consent, we will delete it where required.

Business and Contact Details

Fins & Ferns is operated by [Business legal name] at [Business address]. For privacy questions or data requests, contact [Support email] or visit the Support page.