Privacy

A plain summary of what My Sentiments Studio collects, why, and how to remove your data.

What we collect

If you only read

We collect anonymised, aggregated analytics about page views through Vercel's built-in analytics. No third-party advertising trackers run on this site.

If you comment

We store the name, email, and comment body you submit. The email is never published. Your IP address is hashed (one-way SHA-256) and used only for rate-limiting and abuse detection.

If you sign up for an account

Sign-up is handled by Supabase Auth. We store your email and an optional display name + avatar. Authentication uses a secure HTTP-only cookie; we do not run any third-party trackers on authenticated pages either.

Cookies

We set two cookies, both first-party and required for the site to work:

• Auth session cookies — set by Supabase Auth when you sign in. Removed on sign-out.
• Analytics cookies — Vercel Web Analytics uses no cookies by default. Vercel Speed Insights records anonymous performance samples.

Third parties

We use the following processors:

• Supabase — database, authentication, storage.
• Vercel — hosting + analytics.
• Cloudflare Turnstile — bot challenge on the comment form.
• Upstash Redis — rate-limit counters (key is the hashed IP only).

Your data, your control

You can:

• delete your account — email hello@mysentimentsstudio.com;
• have a comment removed — same address, please include the URL and a quoted snippet;
• request a copy of the data we hold about you.

Contact

For any privacy question: contact us.