Privacy, in plain language.

Published pages are unlisted, not access-controlled

Appogeny does not put recipient pages in a public gallery and asks search engines not to index them. Anyone who has a recipient link can still open it, so do not publish secrets that require authentication.

What is stored

• The words, links, settings, photos, video, and audio you choose to publish.
• A one-way hash of the private edit token. The raw edit token is shown once and is not stored.
• Short-lived IP-based counters used to limit publishing, uploads, reports, and admin sign-in attempts.
• Reports, including an optional reporter email address when one is provided.
• Aggregate usage information through Vercel Analytics. Appogeny does not run advertising trackers.

Who processes it

Vercel hosts the application and Supabase stores published content and media. Cloudflare Turnstile may process verification data when abuse protection is enabled. These services process data to operate and protect Appogeny.

Control and deletion

The private edit link is the only ownership credential. Open it to change or permanently delete the page and its uploaded media. Appogeny cannot recover a lost edit link. If a page targets you or contains content you want reviewed, report the page.

Retention and safety

Published content remains until its holder deletes it or moderation removes it. Unfinished upload sessions expire after 48 hours and their media is scheduled for deletion. Reports are retained for moderation and abuse records, with optional reporter email visible only to the operator.