Privacy Policy

Last Updated: November 2026 Effective for: All ElseSourav applications, services, and web tools.

1. Introduction

ElseSourav ("we," "our," or "platform") is the personal software studio of Sourav Barui. We develop web applications, developer tools, and technical content. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services at elsesourav.com. We are committed to minimal data collection, transparency, and strict protection of your information. We never sell, rent, or trade your personal data to third parties for advertising or marketing purposes.

2. Information We Collect

2.1 Account Information

When you create an account via our authentication system (powered by Supabase Auth), we collect and store:

• Email address — used for login, notifications, and account recovery
• Display name and optional username — used for profile identification
• Authentication identifiers — OAuth tokens from Google or GitHub if you choose social login
• Profile photo URL — if provided or imported from your OAuth provider

2.2 User-Generated Content

When you interact with our platform, we may store:

• Support tickets — subject, message content, and attachments submitted via our support desk
• Feedback and ratings — app ratings, reviews, and comments you submit
• Library items — saved content, bookmarks, or collections you create
• User preferences — theme, notification settings, and display preferences stored as JSON

2.3 Automatically Collected Information

• Audit logs — we log security-relevant actions (login, password changes, account deletion requests) to protect your account
• Notification records — delivery status of notifications sent to your account
• Anonymous telemetry — if analytics are enabled (NEXT_PUBLIC_ENABLE_ANALYTICS), aggregated, non-identifiable usage statistics to improve performance and diagnose errors. This can be disabled.

2.4 Cookies

We use essential cookies only for:

• Session management — Supabase authentication cookies to maintain your login session
• Security — CSRF protection and session integrity

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

3. How We Use Your Information

We use collected information exclusively for:

• Account management — creating, maintaining, and securing your account
• Service delivery — providing the features and tools you use
• Communication — sending transactional emails (password resets, OTP codes, support replies)
• Security — detecting unauthorized access, preventing abuse, and maintaining audit trails
• Improvement — understanding aggregated usage patterns to improve our applications (only with anonymized data)

We do not use your data for:

• Targeted advertising
• Data brokerage or resale
• AI/ML model training on your personal content
• Behavioral profiling or tracking across third-party sites

4. Third-Party Services

We use the following third-party services to operate our platform. Each processes only the minimum data necessary:

We do not share your personal information with any other third parties. Each service above is governed by its own privacy policy.

5. Data Storage & Security

Your data is stored in PostgreSQL databases hosted on Supabase infrastructure with:

• Row-Level Security (RLS) — database-level access controls ensuring users can only access their own data
• Encrypted connections — all data transmitted over TLS/SSL
• Hashed passwords — passwords are never stored in plain text (handled by Supabase Auth)
• Role-based access controls — admin, staff, and user roles with enforced permission boundaries

Media files (images, avatars) are stored on Cloudinary with secure upload credentials.

6. Data Retention

• Active accounts — your data is retained as long as your account is active
• Account deletion — when you request account deletion, there is a 30-day grace period during which you can cancel the deletion. After 30 days, your account and associated data are permanently removed
• Support tickets — retained for service quality and legal compliance, even after account deletion
• Audit logs — security-relevant logs are retained for a reasonable period for security investigations

7. Your Rights & Controls

You have the following rights regarding your personal data:

• Access & Update — view and edit your profile, email, display name, and preferences via your Account Settings
• Data Export — contact us to request a copy of your personal data
• Account Deletion — initiate account deletion from your Account Settings (30-day grace period applies)
• Communication Preferences — manage notification and email preferences via your settings
• Withdraw Consent — you may stop using our services and delete your account at any time

To exercise any of these rights, visit your Account Settings or contact us at contact@elsesourav.com.

8. Children's Privacy

ElseSourav is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to remove that information.

9. International Users

Our services are hosted and operated primarily for a global audience. By using our services, you acknowledge that your data may be transferred to and processed in the country where our hosting infrastructure is located. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we may notify registered users via email or in-app notification
• Continued use of our services after changes constitutes acceptance of the updated policy

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Email: contact@elsesourav.com
• Support: elsesourav.com/support
• Website: elsesourav.com