Privacy Policy

Last updated: May 1, 2026

Endless Curiosity ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. Information We Collect

• Account data — If you create an account: your email address, username, and (if you sign in with Google) your name. Stored via Supabase.
• Usage data — Anonymised page-view statistics via Cloudflare Web Analytics (no cookies, no fingerprinting, no tracking across sessions)
• User content — Comments you post and articles you heart, follow, or save, stored in our database
• Local storage — Hearts, follows, and preferences are also stored locally on your device for offline access
• Newsletter subscriptions — If you subscribe, your email address and the source of the signup (e.g. footer, modal) are stored

2. How We Use Your Information

• To provide and improve the Service
• To sync your hearts, follows, and comments across devices when signed in
• To send you the newsletter you subscribed to (you can unsubscribe at any time)
• To respond to support requests and account inquiries
• We do not sell your personal data to third parties
• We do not use your data for advertising targeting
• We do not share your data with third parties except as required to deliver the Service (see Section 3)

3. Third-Party Services We Use

• Supabase — Handles account authentication and database storage. See Supabase Privacy Policy.
• Cloudflare — Hosts the site, provides DNS, and provides anonymous analytics. See Cloudflare Privacy Policy.
• Google OAuth — If you choose to sign in with Google, we receive your email address, name, and a unique account identifier from Google. We do not access any other Google account data. See Google Privacy Policy.
• Buttondown — Sends our newsletter to subscribers. See Buttondown Privacy Policy.
• Wikipedia, NASA, The Guardian, arXiv, and other content providers — Listed in our Terms of Service. We fetch publicly available content from their APIs without sending them any user data.

4. Google User Data

When you sign in with Google, the only data we receive and store is:

• Your email address
• Your name or display name (if provided)
• A unique Google-issued account identifier

We do not request, access, or store any additional Google account data such as contacts, calendar, drive files, or photos. We use Google sign-in solely to verify your identity for account access.

5. Data Retention

Account data is retained for as long as your account is active. You can request deletion of your data at any time by emailing support@endlesscuriosity.net. We will delete your account data within 30 days of receiving a verified request, except where retention is required by law.

Newsletter subscriptions are retained until you unsubscribe (which you can do at any time using the link in any newsletter email or by replying with "unsubscribe").

6. Cookies

We use minimal browser storage required for authentication sessions only. Our analytics provider (Cloudflare) is cookie-free. We do not use tracking cookies or advertising cookies of any kind.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent for newsletter subscriptions at any time
• Export your data in a machine-readable format

To exercise these rights, contact us at support@endlesscuriosity.net.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated Policy.

10. Contact

Privacy questions or data requests: support@endlesscuriosity.net