Privacy Policy

Account information: your email address and password, handled by our authentication provider, Supabase.

Profile information: anything you choose to add, such as your name, brand name, bio, profile type, avatar, cover image, and contact email.

Platform and metrics data: the platform links and handles you add, plus growth metrics (views, streams, audience, followers, revenue, and similar figures) you enter or that get synced from a connected platform.

Goals and diary entries: any goals you create and progress notes you write.

Instagram data: if you connect an Instagram account, we request the instagram_business_basic and instagram_business_manage_insights permissions via Instagram’s own login flow. This lets us read basic account info and insights such as follower counts so we can display them in your dashboard. We only request the minimum access needed for that, and you can disconnect at any time from the Connect page.

YouTube data: if you connect a YouTube channel, we request the youtube.readonly scope via Google’s OAuth login flow. This lets us read your channel name, channel ID, subscriber count, and total view count so we can display them in your dashboard. We don’t access your videos, comments, or any other YouTube data, and you can disconnect at any time from the Connect page.

Facebook data: if you connect a Facebook Page, we request the pages_show_list, pages_read_engagement, and read_insights permissions via Facebook’s own login flow. This lets us read your Page name, follower (fan) count, and total video views so we can display them in your dashboard. We only access Pages you manage, not your personal profile, and you can disconnect at any time from the Connect page.

TikTok data: if you connect a TikTok account, we request the user.info.basic and user.info.stats scopes via TikTok’s own login flow. This lets us read your display name and follower count so we can display them in your dashboard. We don’t access your videos or post on your behalf, and you can disconnect at any time from the Connect page.

Waitlist information: if you join our waitlist, we store the email address you provide.

We use your information to operate the platform: running your dashboard, calculating milestones and badges, storing your goals and diary entries, and displaying your public profile if you choose to publish one. We also use it to communicate with you about your account and to improve the product.

We do not sell your personal information.

Service providers: we use Supabase for authentication and data storage, and Vercel for application hosting. Both process data on our behalf under their own security and data-processing terms.

Meta / Instagram & Facebook: if you connect an Instagram account or Facebook Page, data is exchanged with Meta’s Instagram or Facebook Platform in line with their Platform Terms and your authorization.

Google / YouTube: if you connect a YouTube channel, data is exchanged with Google’s YouTube API Services in line with the YouTube Terms of Service and the Google Privacy Policy. You can revoke this access at any time via the Google security settings page.

TikTok: if you connect a TikTok account, data is exchanged with TikTok’s developer platform in line with their Platform Terms and your authorization.

Public profiles: if you set a public profile link, the information you’ve chosen to include on that profile (which can include your contact email) becomes visible to anyone who has the link.

We may also disclose information if required by law.

We retain your information for as long as your account is active. If you delete your account, or ask us to, we will delete your associated data within a reasonable time, except where we’re required to retain it by law.

You can access, correct, or delete most of your information directly from your dashboard and settings. You can also contact us to request access to, correction of, or deletion of your data.

We use essential cookies and browser storage needed to keep you signed in (via Supabase Auth). We do not use third-party advertising cookies.

We use Vercel Web Analytics to understand overall traffic and performance. It doesn’t set cookies or use any persistent identifier to track you across sites — it can’t be linked back to your account or any personal information.

We use reasonable technical and organizational measures to protect your information, including row-level access controls on our database so accounts can only read and write their own data. No method of storage or transmission is completely secure, and we can’t guarantee absolute security.

The Media Footprint is not directed at children under 16, and we don’t knowingly collect information from them.

Your information may be processed in countries other than your own by the service providers listed above.

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

Questions about this policy? Email us at hello@themediafootprint.com.