Privacy Policy — cried.bio

cried.bio (“we,” “us,” or “our”) operates cried.bioand related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use cried.bio, including when you create an account, customize your profile, or visit public profile pages.

By using the Service, you agree to the practices described here. If you do not agree, please do not use cried.bio. For terms governing your use of the Service, see our Terms of Service.

1. Information We Collect

Information you provide

Account data: Email address, password (stored securely by our authentication provider), and account identifiers.
Profile data: Username, display name, bio, avatar, banner, status text, social links, themes, embeds, music settings, and other customization choices.
Social and community data: Follows, friend requests, guestbook messages, reactions, and notifications you send or receive.
Communications: Messages you send to us, such as support requests.

Information collected automatically

Usage and analytics: Profile views, link clicks, session data, referrer URLs, device type, browser type, and general location derived from IP address (such as country or region).
Log data: IP address, timestamps, pages visited, and error logs used for security, debugging, and performance.
Cookies and similar technologies: Session cookies required for authentication and preferences. See Section 8 for details.

Information from third parties

If you connect third-party accounts or embed third-party content (such as music players or social widgets), those providers may share limited information according to their own policies. cried.bio does not receive your passwords for third-party services.

2. How We Use Information

We use collected information to:

Create and manage your account and public profile;
Provide dashboard features, analytics, badges, guestbook, and social tools;
Send transactional emails such as welcome messages, notifications, password resets, and security alerts;
Moderate content, prevent abuse, and enforce our Terms of Service;
Improve, maintain, and secure the Service;
Respond to support requests and legal obligations;
Develop new features and measure engagement.

We do not sell your personal information. We do not use your private account data to train third-party AI models.

3. Public Information

cried.bio profiles are designed to be public. Information you choose to display — including your username, display name, bio, links, badges, guestbook entries (where approved), follower counts, activity feeds (when enabled), and media — may be visible to anyone on the internet and may be indexed by search engines.

Please do not include sensitive personal information on your public profile unless you intend for it to be publicly available.

4. How We Share Information

We may share information in the following circumstances:

Publicly: Profile content you publish is visible to visitors of your profile URL.
Service providers: We use trusted vendors to operate the Service, including hosting, database, authentication, email delivery, analytics, and infrastructure providers. These providers process data on our behalf under contractual obligations.
Legal requirements: We may disclose information if required by law, court order, or government request, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the Service.
Business transfers: If cried.bio is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.
With your direction: When you explicitly request or authorize sharing.

5. Service Providers

cried.bio relies on third-party infrastructure to deliver the Service. These may include:

Supabase — authentication, database, and file storage;
Vercel — application hosting and delivery;
Resend — transactional email delivery;
Analytics and monitoring tools used to maintain reliability and security.

Each provider maintains its own privacy and security practices. We select providers that meet our standards for data protection, but we encourage you to review their policies independently.

6. Email Communications

We send emails related to your account, including welcome messages, social and guestbook notifications, badge awards, and password reset links. These emails are sent from noreply@cried.bio or other cried.bio addresses. You cannot opt out of essential transactional emails while maintaining an active account. We do not send promotional marketing emails without your consent.

7. Data Retention

We retain account and profile data for as long as your account is active or as needed to provide the Service. Analytics and log data may be retained for a shorter period for security and operational purposes. When you delete content or close your account, we will delete or anonymize your data within a reasonable timeframe, except where retention is required for legal, security, or backup purposes.

8. Cookies and Local Storage

cried.bio uses cookies and similar browser storage technologies to keep you signed in, remember preferences, and protect against abuse. Essential cookies are required for authentication. We may also use analytics cookies to understand how the Service is used.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using certain features.

9. Security

We implement administrative, technical, and organizational measures designed to protect your information, including encryption in transit (HTTPS), access controls, and secure authentication practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your password and for activity under your account. Notify us immediately at support@cried.bio if you suspect unauthorized access.

10. Children's Privacy

cried.bio is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will take steps to delete it.

11. International Users

cried.bio is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. By using cried.bio, you consent to such transfers.

12. Your Rights and Choices

Depending on your location, you may have rights to:

Access the personal information we hold about you;
Correct inaccurate information through your dashboard settings;
Delete your account and associated data;
Object to or restrict certain processing;
Export your data in a portable format where technically feasible;
Withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@cried.bio. We may need to verify your identity before fulfilling a request. Residents of the European Economic Area, United Kingdom, and certain U.S. states may have additional rights under applicable privacy laws.

13. California Privacy Notice

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of personal information. As stated above, cried.bio does not sell personal information. To submit a request, email privacy@cried.bio.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes may be communicated through the Service or by email. Your continued use after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: