Privacy

What we keep and why

We store your email and account identity, the lists and items you save, links, notes, prices, images, and your display name and preferences. We use this information to run your account, save your lists and provide the sharing you choose. We also keep records needed for security, storage limits and troubleshooting.

We do not sell your information, use your content for advertising or train AI on it. Access is limited to running and protecting Fancies, helping with a problem or request, and meeting legal obligations.

Your lists and sharing

Lists start private. If you enable sharing, anyone with the link can read that list, including notes, images and your optional display name. There is no public directory. Replacing or disabling the link, or deleting the list or account, stops future access. It cannot recall copies someone already saved.

The services behind Fancies

Cloudflare hosts the app, database and private image storage. Clerk handles email codes and Google sign-in, account verification, sessions and signup protection. These providers process information such as IP addresses, browser details and security activity. Data may be processed outside your country. See Clerk’s and Cloudflare’s data processing terms.

Google sign-in uses basic identity information, including email and profile details. Fancies does not request access to Gmail or your contacts.

Clerk uses cookies and browser storage to keep you signed in, with sessions lasting up to seven days. Necessary authentication and security processing continues; optional Clerk usage telemetry and Cloudflare browser analytics are disabled. Fancies has no advertising trackers or marketing emails.

To understand how Fancies is used, the app sends anonymous usage events to PostHog in the United States: which kind of page was opened (for example “a list”, never its name or contents), and when someone signs up, creates a list, adds an item or turns on a share link. Events include browser, device type, screen size, language and time zone, but no email, account ID, list or item details, links, referrers or shared-list visits. PostHog sets no cookies or browser storage for this, and its IP address data is discarded. See PostHog’s data processing terms.

Product links

When you fetch details or paste a link into the editor, our server requests page information and images from the linked site and its providers. They receive the requested URL and normal server-request information, but not your Fancies credentials, cookies or lists.

Failed or incomplete imports retain the full submitted URL, including query parameters, and basic failure details. These records have no account, session, IP, browser or list identifiers, but the URL itself may contain personal information. They become eligible for deletion after 30 days; hourly cleanup can be delayed by outages or a backlog. Account deletion does not separately remove them because they are not linked to an account.

In the Fancies iPhone app, sharing a product keeps that link and a few save-tracking identifiers in protected storage on your iPhone, so an interrupted save is not repeated. They are removed once the save is confirmed, when you log out or delete your account, or when you delete the app.

The Fancies Chrome extension reads the page you are viewing only when you click its toolbar button: the page address, product title, price, currency and image. That reading happens in your browser, once per click; the image is downloaded from the merchant without your cookies. Nothing else on the page, your browsing history or other tabs is read, and nothing leaves the page unless you save it or the extension asks Fancies to fetch details for that address. The extension uses your existing Fancies sign-in and stores nothing of its own beyond Clerk’s session information.

Opening a saved link takes you to another site with its own privacy practices. Currency estimates use public rates from Frankfurter without sending your account or list information.

Keeping and deleting information

Saved content stays until you remove it or delete your account in Settings. Deletion stops application and shared-link access first; images and the Clerk account are removed through background cleanup, with retries if needed. Unused uploads expire after an hour, with a further hour’s grace before cleanup. We permanently keep a minimal identity identifier and deletion date to prevent a deleted identity from returning.

Encrypted release backups expire after seven days. Separately held recovery copies are kept for up to 30 days from creation; Cloudflare’s database recovery history lasts up to 30 days depending on the plan. Restoring a backup must preserve later deletions and revoked links.

Closed enquiries are kept for up to 90 days, minimal privacy-request records for 12 months, and temporary response exports for 30 days after delivery. Only necessary information is kept longer for a legal obligation or active dispute.

Your choices and contact

You can edit or delete content yourself. For access, correction, a copy of your information, deletion or other privacy requests, email privacy@fancies.app. We may need to verify your identity; please do not email passwords, sign-in codes or identity documents. Contact email is forwarded through Cloudflare to Gmail, so Cloudflare and Google process that correspondence.

We aim to acknowledge requests within seven days and respond within 30 calendar days, sooner where required. Routine access requests are free. If a lawful extension is needed, we will explain it. Your rights depend on applicable law, and you can raise unresolved concerns with the Canadian privacy commissioner or your local regulator.

Updates will appear here, with additional notice where required. See the Terms for using Fancies.