Privacy policy

Who is responsible

Arch Moods (https://archmoods.com) is operated by Admin, based in Cyprus, who is responsible for the personal information described here. For privacy questions or requests, email architecturemoods@gmail.com.

What we collect

You can browse architecture without creating an account. If you create one, Supabase handles your email address, account identifier, password authentication and sign-in sessions. We do not receive your Google password or store plaintext account passwords.

If you choose Google sign-in, Google may provide your name, email address, profile picture and account identifier to Supabase. We use the identity information to sign you in and associate your saved content with your account. We do not request access to your Gmail messages, contacts or Google Drive files.

When signed in, your saved projects, collections, collection covers and ordering, notes, interests and source preferences can be stored in your private account data. Without an account, saved content and preferences are stored in your browser.

Our hosting and authentication providers process technical information such as IP addresses, browser and device information, request times, errors and sign-in events to deliver and protect the service. If you contact us, we receive the information you include in your message.

Why we use it

We use account information to register and authenticate users, sync saved content, recover access and respond to requests. We use technical information to keep the site available, diagnose errors and prevent abuse.

Where the GDPR applies, our basis for providing account features you request is performance of our agreement with you. Site security and reliability rely on our legitimate interests in operating a safe service. Where an optional activity requires consent, we obtain it and you can withdraw it. We may also process information where necessary to meet a legal obligation.

Account identity details are required to provide sign-in and private syncing. An account is optional for browsing. Your notes and saved collections are not public profiles or public posts.

Browser storage and cookies

We use local browser storage to remember saves, settings and sign-in sessions, and session storage to restore the current discovery grid and scroll position. Recently viewed history stays on your device: up to 12 projects are retained, and a tab-local discovery feed snapshot is reused for up to five minutes and remains in session storage until replaced or the tab session ends. Guest saves and preferences remain until you remove them or clear the relevant browser data.

You can clear Recently viewed using its Clear history button. Signing out does not delete your cloud account or all browser-local content. Clearing browser storage can remove local saves and sign you out; it does not delete cloud account data.

Google and infrastructure providers may use their own cookies or storage during sign-in, security checks and service delivery. The site currently has no advertising trackers or third-party marketing analytics. We do not sell personal information or use account information for targeted advertising.

Services and other websites

We use Cloudflare to host the website, deliver and cache content, protect requests and store private account content in R2. We use Supabase for authentication and session verification. Google processes information when you choose Google sign-in. Account confirmation and recovery emails may be delivered through Resend when that email service is enabled. These services receive the information needed for their roles.

Photographs are credited to their publishers and creators. Some images are fetched and cached through our server; images loaded directly from a publisher can disclose your IP address and ordinary request information to that publisher. Publisher links, Google and other external websites have their own privacy practices.

Provider information: Cloudflare, Supabase, Google, and Resend.

Public collection sharing and discovery features

Collections stay private unless you create a sharing link. Anyone with that link can view the collection title and the designs in its published snapshot. Personal notes, your email address and other collections are not included. Later edits are not published until you update the shared version. You can stop sharing from the collection controls; people may still keep copies they already made.

The project map uses self-hosted geography and approximate city-centre locations. It does not request your device location. Choices in the This or that game stay in the current tab and are not added to your account.

Retention and deletion

We keep account identity and synced content while the account is maintained, unless you request deletion or the data is no longer needed for the service. To request deletion of your account and its synced content, contact us using the email above. We may ask for information sufficient to verify that the account belongs to you; do not send your password.

Technical and authentication logs are retained for operational and security needs under the providers' applicable plan and settings. Backups and security records can remain until their retention cycles expire, or longer where a legal obligation requires it. Local browser copies remain under your control and may need to be cleared separately after account deletion.

Where information is processed

Our providers operate internationally, so information may be processed outside your country or the European Economic Area. Their applicable data-processing terms describe transfer safeguards, including standard contractual clauses where relevant. Choosing a European authentication project does not mean every log, support operation or cached request stays in Europe.

Your choices and rights

Depending on the law that applies, you can request access to your information, correction, deletion, a portable copy, restriction of processing or objection to processing based on legitimate interests. You can withdraw consent for activities that rely on it without affecting earlier lawful processing.

Contact architecturemoods@gmail.com to exercise these rights. Where the GDPR applies, we respond without undue delay and normally within one month, subject to permitted extensions. You can also complain to your local data protection authority.

You can revoke Arch Moods' Google access in your Google Account settings. Revoking Google access alone does not delete your Arch Moods account or its saved content; request deletion separately.

Changes to this policy

We will update this page when our practices change and revise the date above. We will provide additional notice where applicable law requires it.