Privacy Policy

1. Data Controller

Ari's Apothecary is responsible for determining how your personal information is used on this website. If you have privacy questions or requests, contact us at support@arisapothecary.com.

2. Information We Collect

We collect information in the following categories:

• Account data: email address, username, and authentication/session data when you sign up or log in.
• User content: deck data, profile information, and content you choose to publish.
• Technical and security data: IP address, user-agent, request timestamps, and related logs.
• Usage analytics data: aggregated page and interaction analytics from Umami and first-party cookieless traffic metrics.

3. Where Information Comes From

• Directly from you (for example when creating an account or editing decks).
• Automatically from your device and browser when using the site.
• From service providers that process data on our behalf.

4. Why We Use Information

• To provide account, deck builder, and community features.
• To operate, maintain, and secure the website.
• To detect abuse and enforce rate limits/security controls.
• To improve product quality and user experience through aggregate analytics.

We do not sell your personal information and do not use your data for cross-site behavioral advertising. We may share aggregated/de-identified stats that cannot reasonably identify you to Weebs of the Shore.

5. Service Providers

We use trusted processors to run the site:

• Clerk: authentication and account/session infrastructure.
• Supabase: database infrastructure.
• Umami: privacy-focused website analytics.
• Upstash Redis: temporary traffic counter storage for first-party cookieless page analytics.
• Vercel: hosting, edge delivery, and runtime infrastructure.

These providers process data under their own terms and privacy policies, and as processors for our services where applicable.

6. Cookies and Similar Technologies

We only use essential cookies required for authentication, security, and core functionality on the site. Our analytics setup is cookieless: Umami plus first-party server-side aggregate traffic counters. These counters use short-lived, masked request fingerprints for approximate unique visitor counts and do not create cross-site tracking profiles.

7. Data Retention

We retain data based on purpose and necessity:

• Account and user content data: retained while your account is active.
• Operational/security logs: retained only as long as needed for security and reliability.
• Analytics data: retained in aggregated form as provided by our analytics service settings.

We may retain certain data longer when legally required.

8. Your Privacy Rights

Depending on your location, you may have rights to:

• Access personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request portability of eligible data.

To exercise these rights, email support@arisapothecary.com.

9. International Data Transfers

Your information may be processed in countries other than your own depending on infrastructure and service providers. Where required, we rely on appropriate legal safeguards for international transfers.

10. Data Security

We use reasonable technical and organizational measures to protect personal information. No online system is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

This site is not intended for children under 13, and we do not knowingly collect personal data from children under 13.

12. Policy Updates

We may update this policy periodically. Changes are posted on this page and reflected by the updated date at the top.