Privacy Policy

Rigamarollmedia operates the website at rigamarollmedia.com and any sub-domains (collectively, the "Site"). Contact: rigamarollmedia@gmail.com.

Accounts can be created two ways, each collecting only what is needed to sign in:

• Email and password — an email address and a password. Passwords are never stored in plain text; they are salted and hashed by the authentication provider (Supabase).
• Google sign-in — name, email address, and Google profile picture URL, limited to what is authorized at sign-in.

No payment information is collected. Rigamarollmedia does not purchase, sell, or broker third-party personal data.

Collected data is used solely to:

• Authenticate and maintain sessions on the Site.
• Display a name and avatar while signed in.

No data is used for advertising, profiling, or any purpose beyond operating the Site.

Essential session cookies are set by Supabase to keep a user signed in. These cookies are deleted when the session expires or the user signs out. No tracking, analytics, or advertising cookies are used.

Personal data is not sold or shared with third parties, except in these cases:

• Supabase— the authentication and database provider that stores account records (email, hashed password, and profile details) on Rigamarollmedia's behalf. Data handling by Supabase is governed by Supabase's Privacy Policy.
• Google — for accounts created with Google sign-in, as the OAuth provider. Data handling by Google is governed by Google's Privacy Policy.
• Legal requirements — if required by law, regulation, or valid legal process.

Account records (email, hashed password, and profile details) are retained by the authentication provider for as long as the account exists. Accounts and their associated data are deleted on request — see Section 7. Session cookies persist only for the duration of a browser session or until sign-out.

Depending on location, the following rights may apply:

• Access to personal data held by Rigamarollmedia.
• Correction or deletion of that data.
• Withdrawal of consent at any time by signing out and revoking access via Google account permissions.

To exercise any of these rights, email rigamarollmedia@gmail.com. Requests will be addressed within 30 days.

The Site is not directed at children under 13. No personal data is knowingly collected from children. If a child has submitted personal data, contact rigamarollmedia@gmail.com and it will be deleted.

Reasonable technical measures are in place to protect personal data. No internet transmission is completely secure. Signing in via Google means credentials are handled entirely by Google — Rigamarollmedia never receives or stores passwords.

This policy may be updated from time to time. Continued use of the Site after any change constitutes acceptance of the updated policy.

Questions or requests regarding this policy: rigamarollmedia@gmail.com