Privacy Policy

1. What We Collect When you use Melek, we collect: Account information — username, email, password hash, and (for OAuth sign-ins) the provider identifier returned by Google or Discord. Profile information — display name, bio, avatar, social links, and your storefront preferences. Curation activity — the products you save, tag, and organise into spreadsheets. Analytics — anonymised page views, product views, agent-click counts, and aggregate referral metrics. 2. How We Use It We use the information to operate the Service: rendering your storefront, attributing affiliate clicks to your account, surfacing your spreadsheets to followers, and computing the stats you see at /me/stats. We do not sell your personal information to third parties. 3. Affiliate Routing When a visitor taps a Buy link on your storefront, we attach your affiliate code and redirect them to the relevant shopping agent. That redirect is logged so we can show you accurate click and conversion counts. We do not share visitor identities with agents beyond the affiliate-code attribution. 4. Cookies and Local Storage Melek uses two categories of cookies and browser storage. You can review and change your analytics choice at any time via the "Cookie preferences" link in the footer. Strictly Necessary These keep the site working and cannot be turned off. We do not need consent for them under EU law. NextAuth session — keeps you signed in ( next-auth.session-token , next-auth.csrf-token ). NEXT_LOCALE — remembers your language preference (en / es / pt / it / fr / ro). Lifetime: 1 year. melekro-consent-v1 — stores your cookie-preference choice itself. Lifetime: 1 year. melekro-currency (browser localStorage) — remembers your currency (USD / EUR / BRL / CNY / RON). preferred_agent_id (browser localStorage) — remembers your selected shopping agent. Analytics — Requires Consent These only run after you click "Accept all" in the cookie banner. If you decline or choose only Necessary, none of the following are set. Google Analytics 4 — anonymised page / product views and aggregate site usage ( _ga , _ga_* ). Lifetime: up to 2 years. Provided by Google LLC under Google Consent Mode v2, so analytics is set to denied by default until you opt in. rh_vid — anonymous visitor identifier used to deduplicate counts in our own click logs. Lifetime: 30 days. We do not use third-party advertising trackers, ad-personalisation cookies, social-network pixels, or cross-site retargeting. 5. Data Retention We retain account data for as long as your account is active. When you delete your account, your personal information is removed within 30 days; aggregated, de-identified analytics may be retained. 6. Your Rights You can review and update your profile information at /me/profile and your account credentials at /me/account. To request a copy of your data or to request deletion, contact [email protected] . 7. Third Parties Melek relies on third-party services to operate: a hosting provider, a database provider, OAuth providers (Google, Discord), and email senders. These providers process data on our behalf under their own privacy commitments. They do not have independent rights to use your data. 8. Children Melek is not directed at children under 13. If you believe a child has provided personal information, please contact us so we can remove it. 9. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be announced on the Service. 10. Contact Privacy questions can be sent to [email protected] .