Privacy Policy

1. Who we are

EDGE (edge.supply) is a digital platform for code components and web development resources, operated by a sole proprietor. For privacy-related questions, contact support@edge.supply.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

2. Data we collect

We collect different types of information depending on how you interact with EDGE.

Account data — when you create an account, we collect your email address, display name, and profile avatar. If you sign in through Google or GitHub, we receive basic profile information from those providers (such as your name, email, and profile picture).

Payment data — when you subscribe to a paid plan, your payment is processed by Stripe. We do not store your credit card number, CVC, or full billing details on our servers. Stripe provides us with limited transaction information such as the last four digits of your card, billing country, and subscription status so we can manage your account.

Usage data — we collect information about how you interact with the platform, including which pages you visit, which resources you view or copy, and how you navigate the interface. This data is collected through PostHog.

Technical data — when you access EDGE, we automatically collect certain technical information such as your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. This data helps us maintain service reliability and diagnose issues.

Communications — if you send us a message through the feedback form on the platform, we collect the content of your message along with your email address (so we can respond) and any optional context you provide.

3. How we use your data

We use the data we collect for the following purposes:

Providing the service — authenticating you, managing your account, delivering resources, and maintaining your subscription status.
Processing payments — handling subscription charges, renewals, and cancellations through Stripe.
Transactional communication — sending account and billing messages required to provide the service. Authentication emails (such as sign-in links/codes) are sent by Supabase. Welcome/account emails are sent via Resend. Billing communications are handled by Stripe.
Support communication — routing feedback form submissions to our support inbox via Resend, including any contact details you provide for follow-up.
Product analytics — understanding how the platform is used so we can identify issues, improve existing features, and build new ones. We use PostHog for this.
Security and abuse prevention — detecting and preventing fraudulent activity, unauthorized access, and other threats to the platform.
Legal compliance — meeting our obligations under applicable laws, responding to legal requests, and protecting our rights.

We do not sell your personal data to anyone. We do not use your data for advertising or ad targeting.

4. Third-party services

We rely on a limited set of third-party services to operate EDGE. Each of these services processes data on our behalf and under contractual obligations to protect it.

Supabase — provides authentication (email magic links, OAuth) and database hosting. Your account data and session information are stored with Supabase. supabase.com/privacy
Stripe — handles all payment processing and subscription management. When you subscribe, Stripe processes your payment details directly. stripe.com/privacy
PostHog — powers product analytics and usage measurement. posthog.com/privacy
Resend — delivers transactional welcome/account emails and feedback form submissions. resend.com/legal/privacy-policy
Vercel — hosts the platform and runs our serverless infrastructure. Vercel processes request data (IP addresses, headers) as part of serving the application. vercel.com/legal/privacy-policy
Google and GitHub — if you choose to sign in with Google or GitHub, these providers share limited profile information with us as part of the OAuth flow. Their respective privacy policies apply to the data they collect on their end.

If you are located in the European Economic Area or a jurisdiction that requires a legal basis for processing personal data, we rely on the following:

Contract performance — processing necessary to provide you with the service you signed up for (account management, delivering resources, processing payments).
Legitimate interests — analytics to improve the product, security monitoring, and fraud prevention, where these interests are not overridden by your rights.
Legal obligations — processing required to comply with applicable laws, such as tax and accounting requirements.
Consent — where we rely on your consent (for example, for optional communications), you can withdraw it at any time by contacting us.

6. Data retention

We retain your personal data for as long as your account is active and as needed to provide you with the service.

If you delete your account (or request deletion), we will remove or anonymize your personal data within 30 days, except where we are required to retain certain information for legal, tax, or accounting purposes, or to resolve disputes.

Payment records processed by Stripe are retained according to Stripe’s own policies and applicable financial regulations.

Analytics data collected through PostHog is retained according to our PostHog retention settings and used for product and reliability analysis.

7. Your rights

Depending on where you are located, you may have certain rights regarding your personal data, including the right to:

Access your data and receive a copy of what we hold about you.
Correct inaccurate or incomplete data.
Delete your account and associated personal data.
Restrict processing of your data in certain circumstances.
Object to processing based on legitimate interests.
Data portability — receive your data in a structured, commonly used format.

To exercise any of these rights, contact us at support@edge.supply. We will respond within the timeframe required by applicable law (typically 30 days).

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

8. Security

We use reasonable technical and organizational safeguards to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure authentication flows, and access controls on our infrastructure.

No online service can be guaranteed to be 100% secure, but we continuously monitor and improve these safeguards.

9. International data transfers

Some of the third-party services we use are based in or transfer data to the United States or other countries outside the European Economic Area. Where such transfers occur, we rely on appropriate safeguards as required by applicable data protection law, such as standard contractual clauses or the service provider’s participation in recognized data protection frameworks.

10. Children

EDGE is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that a user is under 16, we will take steps to delete their account and associated data.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last updated” date at the top of this page. For material changes, we may also notify you by email or through the platform.

We encourage you to review this policy periodically to stay informed about how we handle your data.

12. Contact

For any questions, concerns, or requests related to your privacy or this policy, reach out to us at support@edge.supply.