User Agreements

Privacy Policy

1. Data Collection

Extaas.com collects and processes only the data necessary to provide its services.

Authentication and account management are handled via trusted third-party services:

• Supabase (database and authentication)
• Google and Discord (login providers)
  
  Email delivery and communication are handled via:
• Resend (transactional emails)
• Google Workspace (email inbox and correspondence management)
  
  Extaas.com does not use Google Analytics, Google AdSense, or similar advertising or tracking platforms.
  
  Passwords are not stored. Authentication is performed using secure third-party login providers.
  

2. LocalStorage and Cookies

• LocalStorage stores temporary login info and user preferences (like language, theme, and tool settings). This helps keep you signed in and personalize your experience. After deleting your account, this info can no longer be used, though it may remain in your browser for a short time.
  
• Cookies are used only where technically required, primarily for:
  • authentication sessions (Supabase)
  • maintaining login state
    
    No tracking or advertising cookies are used.
    

3. Personalization and Account Role

By default, personalization is handled locally on the user’s device.

If a user creates an account, certain preferences may be stored server-side to enable cross-device usage or extended functionality. Account-based personalization is optional and limited.

4. Data Sharing

Extaas.com does not sell or share personal data with third parties.

Data is processed only by essential service providers required to operate the platform:

• Supabase
• Google
• Discord
• Resend
• Netlify
  
  Each provider processes data under its own privacy policy.
  

5. Data Retention

Personal data is retained only for as long as necessary to provide the service or comply with legal obligations.

Users may request deletion of their account and associated data at any time. Deleted data is permanently removed and cannot be restored.

6. Infrastructure and Hosting

• Domain services are provided by veebimajutus.ee
• Website hosting and deployment are handled by Netlify
• Source code is stored and managed via GitHub
  
  No personal data is intentionally stored in the public source code repository.
  

7. Data Protection and Security

• Sensitive data is handled securely server-side
• Supabase row-level security (RLS) is used where applicable
• Access to data is restricted to necessary services only
  

8. Data Roles

Depending on the feature used, Extaas.com may act as a data controller or data processor under GDPR.

Third-party providers act as independent controllers for their respective services.