Privacy Statement

We collect information in the following ways:

Information you provide directly:

• Email address and password (upon registration)
• Username and display name
• Profile biography and avatar image
• Article submissions, comments, and associated content

Information collected automatically:

• Session tokens and authentication cookies (via Supabase)
• Preference data (theme, font size) stored in your profile
• Interaction data (likes, bookmarks) associated with your account

We use the information we collect to:

• Create and maintain your account
• Display your contributions, comments, and profile information publicly
• Send transactional emails (account confirmation, password reset)
• Store and apply your reading preferences across sessions
• Review submitted articles for editorial suitability
• Enforce our Terms of Service and community standards
• Improve the platform and analyze usage patterns in aggregate

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

Your data is stored using Supabase, a managed backend-as-a-service platform that employs industry-standard security practices including encryption at rest and in transit. Authentication is handled via Supabase Auth with secure session management.

While we implement reasonable security measures, no system is perfectly secure. You should use a strong, unique password for your Murucutu account and exercise appropriate caution with your login credentials.

Murucutu uses cookies and session storage for authentication purposes. Specifically:

• Authentication cookies: Required for maintaining your logged-in session. These are set by Supabase and are essential to the operation of the Service.
• Preference data: Your theme and font size preferences are stored in your account profile and applied server-side.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies that would allow parties other than Murucutu to monitor your behavior across the web.

Content you submit to Murucutu — including articles, comments, your display name, username, and avatar — is intended to be publicly visible. Your email address is never displayed publicly. Exercise care in what personal information you include in your public bio or article content.

Depending on your jurisdiction, you may have certain rights regarding your personal data, including:

• The right to access the personal data we hold about you
• The right to correct inaccurate personal data
• The right to request deletion of your account and personal data
• The right to data portability (receiving a copy of your data in a structured format)
• The right to object to certain processing activities

To exercise any of these rights, please contact us at privacy@murucutu.com. You may also delete your account at any time from your account settings page, which will remove your personal profile data.

We retain your account data for as long as your account remains active. If you delete your account, we will remove your personal profile data within 30 days. Article content published under your name may be retained for continuity of the scholarly record, attributed to “Anonymous” or your username at your request.

Murucutu uses Supabase for database, authentication, and file storage services. Supabase processes your data according to its own privacy policy, which you can review at supabase.com/privacy. Font files are loaded from Google Fonts; Google's privacy practices apply to those requests.

Murucutu is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Statement periodically. We will notify registered users of significant changes via email. The effective date at the top of this page indicates when it was last revised. Continued use of the Service after changes take effect constitutes acceptance of the revised Statement.

For privacy-related inquiries, requests, or concerns, please contact us at privacy@murucutu.com. We will respond to requests within 30 days.