Privacy Policy

Last updated September 28, 2026

embeddd (“embeddd”, “we”, “us”) is a service for collecting links, photos, videos, notes and sketches on boards. This policy explains what information we collect when you use embeddd (the website and apps), how we use it, who we share it with, and the choices you have. We keep it short and we only collect what the service needs to work.

1. Information we collect

Account information

When you create an account we store your email address and, if you choose, a display name, username, short bio and profile photo. If you sign in with a password, the password is stored only as a salted hash by our authentication provider; we never see it.

Information from Google and Apple sign-in

If you sign in with Google or Apple, we receive your email address, your name and (for Google) your profile picture, and a unique account identifier, only to create and sign you in to your embeddd account. We do not request access to your Gmail, Drive, Calendar, contacts or any other Google or Apple data.

Content you add

Boards, projects, cards, notes, sketches, tags, titles, descriptions, and the files you upload (photos, videos and other files). When you save a link, we store the link and a preview of it (title, description, image). When you save an Instagram, TikTok or YouTube post, we store a copy of that post’s photos or videos in your storage so your board keeps working if the original changes.

Technical information

Our hosting provider records standard server logs (IP address, browser type, requested page, time and errors) to operate, secure and debug the service. We use a session cookie to keep you signed in and your browser’s local storage for small preferences, such as sort order or which sidebar folders are open. We do not use advertising cookies or third-party trackers.

2. How we use information

to provide embeddd: store your boards, show them to you and to people you choose to share them with;
to sign you in and keep your account secure;
to make link previews and save media from links you add;
to answer your messages and send essential service emails (sign-in links, password resets, confirmations);
to prevent abuse, fix bugs and keep the service running.

We do not sell your personal information, we do not use it for advertising, and we do not use the content of your boards to train machine-learning models.

3. Google user data

embeddd’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google sign-in (email, name, profile picture) is used only to create and operate your embeddd account, is never sold, never used for advertising, and never shared with third parties except the service providers listed below that host embeddd.

4. Sharing and public links

Your boards are private by default. They are visible to other people only if you invite them to a project or turn on a public link. Anyone with a public link can view that board or project (read-only) until you turn the link off.

We share information with service providers that process it on our behalf, only as needed to run embeddd:

Supabase — database, authentication and file storage;
Vercel — hosting and delivery of the website and its server functions;
Google and Apple — only if you choose to sign in with them;
media and preview services — when you save a link, its address is sent to the website it points to, and for social posts it may be sent to a media-retrieval service we use to fetch the post’s public photos or videos.

We may also disclose information if required by law, or to protect the rights, safety and property of our users or of embeddd.

5. Where data is stored

Your data is stored with our providers, primarily in data centres in the European Union. Some providers may process data in other countries; where they do, they are bound by appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

We keep your account and content for as long as your account exists. Cards and boards you delete stay in Trash for 30 days and are then removed permanently. When you delete your account (Settings → Delete account), your profile, boards, projects you own, public links and uploaded files are deleted. Server logs are kept for a limited period by our hosting provider.

7. Your rights and choices

You can view and edit your profile in Settings, delete individual cards and boards at any time, turn public links off, and delete your whole account. Depending on where you live (for example under the GDPR), you may also have the right to access, correct, export or erase your personal data, to object to or restrict its processing, and to complain to your local data protection authority. To make a request, email support@embeddd.app; we answer within 30 days.

8. Security

Data is encrypted in transit (HTTPS) and access to it is restricted by row-level security, so each account can reach only its own data and what has been shared with it. No system is perfectly secure, but we work to protect your information and will notify you of a breach that affects it as required by law.

9. Children

embeddd is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date above and, for significant changes, let you know in the app or by email before they take effect.

Questions? Write to support@embeddd.app.