Privacy Policy

Last updated: April 8, 2026

1. Data We Collect

We collect: email address, name, username (required for account). Optionally: bio, avatar, social links, location. Content you create: graphs, nodes, connections, personal notes. Technical data: IP address for rate limiting (not stored permanently).

2. How We Use Your Data

We use your data to: provide the service, display your public profile (if enabled), send transactional emails (welcome, password reset), improve the platform. We do NOT sell your data to third parties.

3. Data Storage

Your data is stored on servers in Frankfurt, Germany (DigitalOcean). Passwords are hashed with bcrypt (12 rounds). We use HTTPS for all connections.

4. Third-Party Services

We use: Google OAuth and GitHub OAuth for authentication, Resend for transactional emails, Open Library/TMDB/Spotify APIs for content search. These services have their own privacy policies.

5. Cookies

We use essential cookies only: session token (authentication), theme preference (localStorage). We do NOT use tracking cookies or third-party analytics cookies.

6. Your Rights (GDPR/KVKK)

You have the right to: access your data, correct inaccurate data, delete your account and all associated data (Settings > Delete Account), export your data. To exercise these rights, contact support@synaptive.app.

7. Data Retention

We retain your data as long as your account is active. When you delete your account, all data is permanently removed within 30 days.

8. Contact

For privacy-related questions: support@synaptive.app