Privacy Policy

1. Information We Collect

We collect the following information to provide QuailBook:

• Account Information: Your email address and authentication details when you create or sign in to your account.
• Flock Data: All information you enter about your flocks, including bird records, incubation batches, brooding logs, egg counts, health events, breeding details, and culling records.
• Cookies: We use cookies to maintain your authentication session and to store your timezone preference for accurate date display. See section 5 below.
• Usage Data: Anonymous page-view statistics (pages visited, referrer, country, and device and browser type), collected without cookies by Vercel Web Analytics. Only the page path is sent: record ids are replaced and anything after a "?" (sign-in links, searches) is removed. It is not linked to your account.
• Error Reports: If a page fails while you are signed in, your browser sends us the error message and technical details (stack trace and error id), the page path (without anything after a "?"), and your browser's user-agent string, linked to your account id and email. We store these in our database for 30 days and use them only to find and fix bugs.

2. How We Use Your Information

We use the information you provide exclusively to:

• Authenticate you and maintain your account.
• Store and display your flock records as requested.
• Generate projections, milestones, and alerts based on your data.
• Provide customer support in response to your inquiries.
• Improve the service based on usage and feedback.

We do not use your information for marketing, targeted advertising, or any purpose beyond operating QuailBook.

3. Data Processors and Sharing

Your data is processed by trusted third-party services necessary to operate QuailBook:

• Supabase: Hosts our database and authentication system. Your data is stored on Supabase infrastructure and encrypted in transit and at rest.
• Vercel: Hosts the QuailBook web application, serves it to your browser, and provides cookie-free, anonymous page-view analytics.
• Google: If you choose to sign in with Google OAuth, Google processes your authentication. You control what information Google shares with us through your Google account settings.
• Have I Been Pwned: When you choose a password (at sign-up or when resetting it), your browser checks it against the Pwned Passwords list of passwords exposed in data breaches. Your browser hashes the password (SHA-1) and sends only the first 5 characters of that hash to api.pwnedpasswords.com, then compares the results on your device. Your password, and its full hash, never leave your device. The service receives that request like any other web request (including your IP address), but cannot tell which password you chose. Nothing about you is stored by QuailBook for this check.
• GitHub: Every night we make a backup copy of our database (your account details, except your password, and your flock data) and store it in our private GitHub repository. Each backup is kept for 30 days and then deleted automatically.

We do not sell, trade, or share your personal data with any other parties for any purpose. We will not disclose your data to third parties except as required by law or with your explicit consent.

4. Data Retention and Deletion

We retain your data for as long as your account is active. If you delete your account, all associated data will be deleted from our systems within a reasonable time after your request is confirmed. You can request deletion of your account and data at any time by contacting hello@quailbook.com.

Copies in our nightly backups are not edited after the fact: deleted data can remain in a backup until that backup expires, at most 30 days later. Error reports are deleted after 30 days.

If you would like to export your data before deletion, we will provide a complete export in a standard format at no charge upon request.

5. Cookies

QuailBook uses only essential cookies that are necessary to provide the service:

• Authentication Cookie: Maintains your login session so you remain signed in as you navigate the app.
• Timezone Cookie: Stores your timezone preference so that dates and deadlines display correctly for your location.

We do not use advertising trackers, analytics cookies, or any cookies that track your behavior across other websites. You can disable cookies in your browser, but this will prevent QuailBook from functioning properly.

6. Your Rights

You have the right to:

• Access and download a copy of your personal data at any time.
• Correct inaccurate information in your account.
• Delete your account and all associated data.
• Request clarification about how we collect and use your data.

To exercise any of these rights, please contact us at hello@quailbook.com.

7. Security

We take the security of your data seriously. All data is encrypted in transit using industry-standard HTTPS connections. We rely on Supabase's security infrastructure, which includes encryption at rest, regular security audits, and compliance with recognized security standards. However, no online service is completely secure, and we cannot guarantee absolute security of your data.

8. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the service. Your continued use of QuailBook after any changes indicates your acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or our privacy practices, please contact us at hello@quailbook.com.