Privacy Policy

Introduction

The Vale App ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our web application.

Information we collect

1. Account information

When you create an account, we collect:

• Email address (required for authentication)
• Authentication tokens and session data
• Account creation and last login timestamps

Storage: Managed by Supabase (our authentication provider)

2. Usage and analytics data

We use PostHog to collect analytics and improve the application:

• Page views and navigation patterns
• Feature usage and interactions
• Session duration and frequency
• Device information (browser type, OS, screen resolution)
• Geographic location (country/region level only, via IP address)
• Unique user identifier (anonymous ID stored in cookies)

Storage: PostHog (US servers) - Data retained for 90 days during alpha

3. Error and performance data

To diagnose and fix issues, we automatically collect:

• JavaScript errors and exceptions
• Error stack traces (may include file paths and function names)
• Server-side errors and API failures
• Page URLs where errors occur
• Browser console errors and warnings
• Performance metrics (page load times, API response times)

Note: During alpha testing, we collect comprehensive error data to improve stability

4. Package download data

When you download Vale style packages:

• Package names and versions requested
• Download timestamps and success/failure status
• GitHub API requests (for package metadata)

How we use your information

• Provide and improve the service: Manage your account and enhance application features
• Fix bugs and errors: Diagnose issues, resolve technical problems, and improve application stability
• Analytics and insights: Understand how users interact with the app to prioritize features and improvements
• Security: Detect and prevent fraudulent activity, abuse, and security threats
• Communication: Send important updates about the service (security alerts, major changes)

Data storage and security

Content and editor data

We do NOT collect, store, or transmit your document content or editor settings to our servers. All document processing happens entirely in your browser using WebAssembly (WASM).

The following data stays exclusively on your device:

• Document text you write or upload
• Selected Vale style packages
• Editor preferences (theme, font size, settings)
• Lint results and caching data
• Vale WASM binary and style packages

Storage: Your browser's IndexedDB - completely local, never sent to our servers

Where your data lives

Security measures

• All data transmission uses HTTPS encryption
• Authentication managed by Supabase with industry-standard security
• No server-side storage of your document content
• Regular security updates and monitoring

Third-party services

We use the following third-party services:

Cookies and tracking

We use cookies for:

• Authentication: Keep you logged in (Supabase session cookies, essential)
• Analytics: Track usage and identify returning users (PostHog cookies, begins with ph_)

You can disable cookies in your browser settings, but this may limit functionality (you'll need to log in each time).

Changes to this policy

We may update this Privacy Policy as the application evolves. Significant changes will be announced via:

• An in-app notification
• Updated "Last Updated" date at the top of this page

Continued use of the application after changes constitutes acceptance of the updated policy.