Privacy notice

Clear about what stays private and what becomes public.

Naps & Wrangles uses personal information to run the site, personalize hair-care tools, support community safety, and communicate with you when you ask us to.

Effective: July 25, 2026Last reviewed: July 25, 2026
This is a pre-launch privacy notice. Before public launch, this page will name the business responsible for Naps & Wrangles, confirm the production services in use, and publish the retention rules that apply.

Account data stays with your account

When Supabase is connected, signed-in profiles, quiz history, routines, notes, newsletter choices, and reports are stored with your account. A browser-local fallback may be used when the connection is unavailable.

Public content is public

Journal posts, comments, and shared community content can be read by others once submitted or published.

We do not sell personal information

Naps & Wrangles does not sell personal information or use ads that follow you from site to site.

Privacy choices matter

You can avoid sharing public details, clear data saved only in your browser, and unsubscribe from emails. A formal privacy-request channel will be published before launch.

Information map

What the site may handle

The exact data path depends on the feature. Some information is connected to your account or public content, while some stays on your device.

Account information

Examples

Email address, display name, authentication provider, account identifiers, and session data.

Where it may live

Authentication services and the browser session used to keep you signed in.

Visibility

Private, except a chosen display name may appear beside public content.

Hair profile and quiz information

Examples

Hair type, porosity, density, strand thickness, scalp selection, goals, sensitivities, preferred ingredients, avoid ingredients, and quiz history.

Where it may live

Secure account records in Supabase when connected, with browser-local fallback for some features when the service is unavailable.

Visibility

Private unless you deliberately include similar details in public content.

Journal and community content

Examples

Posts, comments, feed updates, questions, routines, product reviews, classifications, ratings, and optional social links.

Where it may live

Community submissions are stored with the site when submitted by a signed-in member. Draft and offline fallback data may remain in the submitting browser.

Visibility

Journal posts and comments are public. Shared community content should be treated as public.

Photos and uploaded files

Examples

Journal cover images, profile/avatar photos, Hair Note photos, and About-page previews.

Where it may live

Journal covers are stored with published posts. Private note and avatar images use the connected account path when available and otherwise remain browser-local.

Visibility

Journal cover images are public. Hair Note and avatar photos are intended to be private unless you publish them elsewhere.

Newsletter information

Examples

Email address, signup source, interests, unsubscribe choice, and optional unsubscribe feedback.

Where it may live

Newsletter records are stored in the connected account database; delivery still requires a mailing-list provider to be configured.

Visibility

Private.

Safety and technical information

Examples

Report reason and context, hidden-item state, local rate-limit timestamps, authentication state, and provider/server logs.

Where it may live

Reports for connected community records are stored in the moderation queue. Local fallback reports and rate-limit timestamps stay in the browser. Hosting and database providers may keep operational logs.

Visibility

Private administrative or technical information.

How information is used

Information may be used to:

  • create and secure accounts;
  • save hair profiles and quiz history;
  • personalize educational tools, routines, and product filtering;
  • publish Journal content and comments you choose to submit;
  • operate safety checks, rate limits, reports, and moderation;
  • respond to messages only after a working contact or support channel is connected;
  • send newsletters or updates only when you sign up for them;
  • maintain, secure, debug, and improve the site.

Hair-profile information may include scalp comfort, sensitivities, hair history, and ingredient preferences. It supports education and personalization, not medical care. Do not submit diagnoses, treatment records, or urgent medical information.

Public content and your choices

Journal posts, article comments, and shared community submissions are public. They may be copied, indexed, screenshotted, or reshared by other people. Avoid posting phone numbers, personal email addresses, home or school details, workplace details, medical history, or photos that reveal information you do not want public.

Hair Notes, saved hair profiles, quiz history, newsletter choices, reports, and account details are intended to remain private unless you choose to share similar information in a public post or comment.

Browser storage, cookies, and sessions

The site may use browser local storage for drafts, cached Hair Notes and photos, hidden-item state, product-shelf notes, and rate-limit timestamps. Signed-in account records are sent to Supabase when it is available.

When Supabase authentication is connected, it may also store session information in the browser so a signed-in session can persist. Naps & Wrangles does not intentionally use advertising cookies, sell browsing data, or run ads that follow you from site to site.

You can remove browser-local information through your browser settings. Doing so may sign you out or erase local notes, photos, preferences, reports, and saved local content.

Service providers and external links

The current build may use these providers or provider categories:

  • Supabase for authentication and database services when it is connected;
  • Cloudflare for production hosting and delivery at launch;
  • Google Fonts for typography unless fonts are self-hosted;
  • Unsplash for some externally hosted educational images.

External retailer and social links take you to third-party sites with their own privacy practices. Naps & Wrangles does not control those sites. Opening embedded or externally hosted resources may disclose ordinary connection information, such as an IP address and browser details, to the provider serving that resource.

Before any new email, contact, analytics, monitoring, storage, payment, or other provider handles personal information, this notice will be updated to explain that change.

Retention, access, correction, and deletion

Browser-local data remains until it is removed by the feature, cleared through browser settings, or lost when browser data is reset. This notice will list how long server-stored account, newsletter, community, and support records are kept, or the criteria used to decide that period, before launch.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about how personal information is used. Naps & Wrangles does not sell personal information or provide it for ads that follow you from site to site.

A working privacy-request channel has not been published yet. Before public launch, this section will list the privacy email or form and explain how requests are verified and answered.

Children's privacy

Naps & Wrangles includes hair-care education for parents and caregivers, but it is not for children under 13. People under 13 must not create an account, join a mailing list, post community content, or upload photos.

Email account creation and newsletter preferences record an age confirmation. Before launch, the published privacy contact method will also explain how a parent or legal guardian can ask us to review or remove a child's personal information.

Security and incident response

No online service can promise absolute security. Naps & Wrangles works to protect information with appropriate safeguards, including secure service providers, access controls, and routine review of account, community, and moderation features.

Do not submit Social Security numbers, payment-card details, passwords, medical records, or other highly sensitive information through community, Contact, newsletter, or Hair Note features.

Contact and policy changes

A monitored privacy-request channel is not configured yet. Before inviting public members, publish a working privacy email or form and explain how requests are verified and answered.

This notice may change as features, providers, or legal requirements change. Material updates will be posted here with a new effective date, and additional notice will be provided when required.

This page is a product-facing privacy notice based on the site's data flows. It is not legal advice and should be reviewed for the final business structure, launch locations, providers, and applicable laws before public release.