Privacy Policy

Alin Sava operates Alin Sava at localhost:3000. For privacy questions or requests, contact privacy@alinsava.com.

We do not intentionally collect sensitive categories (health diagnoses, government IDs, payment cards). Onboarding asks about emotional patterns for educational recommendations only — not for medical diagnosis.

• Provide and secure your account and sync reading progress across devices
• Personalize article and learning-path suggestions after optional onboarding
• Operate optional community features when you opt in (cohort matching, shared weekly goals, gentle presence, buddy support)
• Send newsletter emails when you opt in
• Operate, maintain, and improve the website
• Respond to privacy requests and support inquiries

We do not sell your personal information and do not share it for cross-context behavioral advertising. See Your Privacy Choices.

Community is entirely optional. If you join, we store a pseudonym and profile photo (not your email or real name) and match you with others working on the same focus problem.

• Visibility — cohort members see your pseudonym and profile photo only; we do not show rankings, points, or individual practice counts on profile cards
• Presence — a coarse activity label (e.g. practicing, browsing) while you are on community pages, refreshed periodically; expires after a few minutes of inactivity
• Encouragements — pre-written messages you choose to send; no open cohort chat in v1
• Buddy notes — short async messages (max 280 characters) only between you and one accepted accountability buddy in the same cohort

You can leave community anytime by deleting your account or contacting privacy@alinsava.com. Community data is included in account export.

We use cookies and browser storage for essential operation, preferences, and consent records. Details are in our Cookie Policy. You can manage choices via the cookie banner or your browser settings.

We use trusted processors to run the site. They process data only on our instructions:

• Supabase — Authentication and database (reading progress, profiles, enrollments, optional community cohort data) (European Union (eu-west-1)). Privacy policy
• Vercel — Website hosting and delivery; server logs (United States and global edge network). Privacy policy
• Sanity — Content management (articles and pages — not user account data) (United States / EU (see Sanity privacy policy)). Privacy policy
• Newsletter provider — Email list management when you subscribe (ConvertKit or custom webhook if configured) (Varies by provider). Privacy policy

• Account data — until you delete your account or ask us to delete it
• Anonymous local progress — until you clear browser storage
• Newsletter — until you unsubscribe or ask for deletion
• Server logs — typically short-term, per hosting provider defaults

We use industry-standard measures including HTTPS, access controls, and Row Level Security on user data in Supabase. No method of transmission or storage is 100% secure.

Depending on where you live, you may have the right to:

• Access and download a copy of your data
• Correct inaccurate information
• Delete your account and associated data
• Withdraw consent (e.g. newsletter, optional onboarding)
• Object to certain processing

Signed-in users: go to Account → Export my data or Delete account. You can also email privacy@alinsava.com.

Anonymous visitors can clear local reading progress by removing site data in browser settings (localStorage key: alinsava-reading-journey).

Legal bases (Art. 6 GDPR):

• Contract — account, progress sync, and features you request when signed in
• Consent — newsletter, optional onboarding, community opt-in, non-essential cookies
• Legitimate interests — site security, anonymous reading progress on your device, improving content (balanced against your rights)

International transfers: Some providers (e.g. Vercel) may process data in the United States. We rely on appropriate safeguards such as Standard Contractual Clauses where required.

Supervisory authority: You may lodge a complaint with ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) (dataprotection.ro) or your local EU/EEA authority (EDPB member list).

This section supplements the policy for residents of California and other US states with similar privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others).

Categories collected (last 12 months): identifiers; internet/electronic activity; inferences; preferences — as described above.

Sources: directly from you (forms, account); automatically from your device (cookies, localStorage); our service providers (hosting logs).

Business purposes: providing the service, personalization, communications you request, security, and site improvement.

Sale / sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Your California / state rights may include the right to know, access, delete, correct, and opt out of sale/sharing (not applicable here). We will not discriminate against you for exercising these rights.

Your Privacy Choices — how to opt out and exercise rights.

Authorized agents: may submit requests to privacy@alinsava.com with proof of authorization and identity verification.

Shine the Light (California): We do not share personal information with third parties for their own direct marketing purposes.

This site is not directed at children under 13 (US) or under 16 without parental consent (EEA). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will delete it.

We may update this policy. The "Last updated" date at the top will change. Material changes may be noted on the site.