Privacy Policy

1. Information We Collect

When you use Shamefull, we collect the following information:

• Account information: Email address and encrypted password when you create an account
• Payment information: Processed entirely by Stripe. We never store your credit card details
• Device information: Device name, platform (macOS/Windows/Linux/Android), and a unique device identifier for license enforcement
• Subscription data: Your plan tier, subscription status, and device count

2. Information We Do NOT Collect

We are committed to your privacy. We explicitly do not collect:

• Your browsing history or DNS queries
• The websites you visit or attempt to visit
• Any content you view online
• Your location data
• Contacts, photos, or files from your devices

Shamefull operates at the DNS level on your device. DNS filtering is performed locally or through our DNS provider. We have no visibility into your browsing activity.

3. How We Use Your Information

• To provide and maintain your subscription
• To enforce device limits based on your plan tier
• To send you your license key and account credentials
• To process payments through Stripe
• To respond to support requests

4. Third-Party Services

We use the following third-party services:

• Stripe for payment processing (Stripe Privacy Policy)
• Supabase for authentication and account management
• Control D for DNS filtering on registered devices
• AWS for infrastructure hosting
• Vercel for website hosting

5. Data Retention

We retain your account and subscription data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days in case you resubscribe. After that, your data is deleted. Payment records are retained by Stripe per their data retention policies.

6. Data Security

Your data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed and never stored in plaintext. Access to production systems is restricted to authorized personnel. We use AWS infrastructure with industry-standard security controls.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at support@shamefull.io.

8. Children

Shamefull is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If a parent or guardian installs Shamefull on a minor's device, the parent or guardian is responsible for managing that device's data.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of Shamefull after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at support@shamefull.io.