Account and profile data
Creating an account stores your email address with our authentication provider, plus an optional display name and username in your profile. Passwords are handled by the authentication provider and are never visible to us.
Your email address is not shown publicly. A profile display name or username is only used inside your dashboard and administrator tools.
Listing information you publish
Anything you enter into a listing is intended to be public once an administrator approves it: listing name, description, contact name, public phone number, public email address, website, social links, address or location, directory memberships, categories, services, and formats.
Do not put private information into a listing. Publish only contact details you are comfortable making available to the public and to search engines.
Uploaded images
Logos and listing images are converted to WebP in your browser and uploaded to private storage. Uploads stay private until an administrator approves them. Approved images are served through short-lived signed links generated by our server; neither storage area is publicly browsable.
Removing an image from your dashboard removes it from the public listing and deletes the stored file.
Authentication provider and hosting
Accounts, the database, and file storage run on Supabase. The site is hosted and deployed through Lovable. These providers process data on our behalf so the site can function.
Contact messages
Messages sent through the contact form are delivered directly to our email inbox over SMTP. We do not store the contents of contact messages in a site database or an in-app inbox. Replies happen by email.
Security and abuse-prevention metadata
To limit spam and abuse we record minimal, non-reversible metadata about contact attempts, such as hashed values used for rate limiting, along with ordinary server logs. Server logs are redacted so credentials and session tokens are not written out.
Cookies and browser storage
We do not use advertising cookies or third-party ad networks. Signing in stores a session in your browser so you stay signed in; clearing browser storage or signing out removes it.
Third-party links and services
Listings link to external websites, social profiles, and map services. Those sites have their own privacy practices, and we are not responsible for them.
Retention and removal
Listing content and images stay in place while your listing exists. Deleting an image, or deleting your listing from your dashboard, removes the associated records and files. Contact emails remain in our mailbox subject to normal email retention.
Your choices
- Edit or remove your listing details and images at any time from your dashboard.
- Delete your listing entirely from the Listings section of your dashboard.
- Ask us to correct or remove information by writing through the contact page.
Changes to this policy
We will update this page as the site grows and will change the “last updated” date above when we do.
Contact
Questions about privacy? Reach us through the Rewind Rolodex contact page.
