Privacy Policy

Welcome to SiriusLove ("we", "our", or "us"). We operate siriuslove.net, a platform that lets you build beautiful, private love pages for your partner.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using SiriusLove, you agree to the practices described here.

Account information — When you sign up, we collect your name, email address, and a hashed password (or authentication token if you use Google Sign-In).

Page configuration — Everything you add to your love page: names, subtitles, profile photos (stored as compressed base64), start dates, love letters, Spotify playlist links, "things I love" lists, and emoji preferences.

Telegram messages — If you use the Live Messages feature, messages sent via our Telegram bot (@siriuslovebot) are stored in Vercel KV and linked to your page slug. Your Telegram chat ID and chosen password are held temporarily to verify identity.

Real-time drawing data — Canvas strokes are stored in Firebase Realtime Database, keyed by your page slug. Anyone with your page URL can view and draw on the shared canvas.

Usage data — We use Vercel Analytics to collect anonymised, aggregated page view statistics (no personal identifiers, no cookies).

• To create and display your love page to visitors with the link.
• To authenticate you and keep your account secure.
• To enable real-time features (live messages, shared drawing).
• To improve our platform using anonymised analytics.
• To respond to support requests or legal obligations.

SiriusLove relies on the following third-party services. Each has its own privacy policy:

• Supabase — Database and authentication. supabase.com/privacy
• Firebase (Google) — Realtime drawing canvas. policies.google.com/privacy
• Vercel KV / Upstash Redis — Message storage. vercel.com/legal/privacy-policy
• Telegram — Live messaging bot. telegram.org/privacy
• Spotify — Embedded playlist player (optional). spotify.com/legal/privacy-policy
• Vercel Analytics — Anonymised page analytics.

Photos you upload are compressed and stored as base64-encoded strings in our database. They are only displayed on your love page and in the editor.

You are responsible for ensuring you have the right to use any content you add. Do not upload images of others without their consent.

• HTTPS encryption for all data in transit.
• Supabase Row Level Security (RLS) so users can only access their own data.
• Hashed passwords — we never store plain-text passwords.
• Telegram bot password verification before granting message permissions.

No method of transmission over the internet is 100% secure. We take reasonable precautions but cannot guarantee absolute security.

Your love page at siriuslove.net/your-slug is publicly accessible to anyone with the link. Pages are not password-protected by default on the free plan.

Only share your page URL with people you trust. The drawing canvas and messages are visible to all visitors.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via the editor or account settings.
• Delete your account and all associated data by contacting us.
• Export your page content from the editor.

SiriusLove does not use advertising cookies or cross-site tracking. We use only essential session cookies required for authentication (managed by Supabase). Vercel Analytics collects anonymised, cookie-free metrics.

SiriusLove is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of SiriusLove after changes constitutes acceptance of the updated policy.