Privacy Policy

Osweng Space is a personal dashboard and gateway that hosts the owner's applications — including the Account, Portal, and Portfolio apps — behind a shared sign-in. This policy explains what we collect when you use these apps, why we collect it, and the choices you have.

This document is a general template, not legal advice. It describes how the project is built today and may change as the project evolves.

Information we collect

• Account details. Your email address and password (stored only as a secure hash by our authentication provider).
• Profile information. Optional fields you choose to add, such as your name, display name, username, pronouns, sex, and birth date.
• Social handles. Links you add for platforms like GitHub, LinkedIn, Facebook, Instagram, or X.
• Avatar. An optional profile image you upload, stored in our file storage.
• Authentication data. Session cookies that keep you signed in across apps, and, if you enable it, two-factor authentication (TOTP) and recovery codes.

How we use your information

• To create your account and authenticate you across our apps.
• To display your profile and the preferences you set.
• To keep your account secure, including two-factor sign-in.
• To operate, maintain, and improve the apps.

We do not sell your personal information, and we do not use it for third-party advertising.

Where your data is stored

Account, profile, and preference data is stored in a Supabase Postgres database with row-level security so that you can only access your own records. Avatars are stored in Supabase Storage. The apps are hosted on Vercel.

Cookies

We use cookies that are strictly necessary to keep you signed in. The authentication cookie is shared across our apps so a single sign-in works everywhere. We do not use advertising or cross-site tracking cookies.

Third-party services

• Supabase— authentication, database, and file storage.
• Vercel— application hosting and basic, privacy-friendly analytics.
• OAuth providers(such as GitHub, Facebook, and LinkedIn) — only if you choose to connect them.

Your rights and choices

You can review and update your profile, social links, avatar, and preferences at any time from the Account app. You may request deletion of your account and associated data by contacting us. Deleting your account removes your profile, social links, and stored avatar.

Security

Passwords are hashed, data access is protected by row-level security, and you can enable two-factor authentication (TOTP) with single-use recovery codes. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

These apps are not directed to children, and we do not knowingly collect personal information from anyone under the age required by applicable law.

Changes to this policy

We may update this policy as the project changes. When we do, we will revise the “last updated” date above.

Contact

Questions about this policy or your data? Reach out to the project owner through the contact details listed on the portfolio app.