Last updated:
We respect your privacy and process personal data in accordance with applicable laws (notably GDPR). This document explains what data we process, for what purposes, with whom we share it, how long we keep it, and what rights you have.
These policies apply to the website CodeWhiskers.app and to the app BetterShelf used to track cosmetics and home goods.
What data we process
- User account (if you sign in): email/account address – for login and sync.
- Product data (entered by you in BetterShelf): name, category, expiry date, notes – to provide app features (tracking, reminders, statistics).
- Diagnostics (aggregate): technical logs and errors (e.g., an "app_crash" event with stack trace) – to improve stability and security.
- Session replay in the app: screens and interactions with masking of text inputs and images – for debugging and UX improvements.
- Shelf sharing data: inviter's email and optionally invitee's email – to create and manage invitations.
- Technical and operational data from the website: IP, cookie identifiers, device and browser info – for site operation, security, and analytics (Google Analytics only after consent).
Legal bases
- Contract performance: providing app features and data sync.
- Legitimate interests: diagnostics, security, abuse prevention, and support.
- Consent: analytics cookies on the website (Google Analytics).
How we use data
- Providing website and app features (product tracking, notifications, statistics).
- Syncing your data across devices (if enabled).
- Improving reliability, performance, and security (error detection, abuse prevention).
- Fulfilling legal obligations and handling support requests.
Sharing with third parties
We do not sell your data and do not share it for marketing purposes. We do not use ads.
We use Google Firebase as a processor for BetterShelf:
- Firebase Authentication (sign-in)
- Cloud Firestore (data storage)
- Remote Config (remote configuration)
- App Check (abuse protection)
For diagnostics and UX improvements in the app, we use PostHog (EU endpoint), including session replay with masking of text inputs and images. On the website we use Google Analytics only after consent through a cookie banner.
Retention and security
- Firestore / app data: retained for the lifetime of the account; export/deletion on request.
- PostHog: session replay 30 days; events 13 months.
- Google Analytics (website): 14 months; active only after consent.
- Data transfer is protected with TLS. We regularly update software and apply least-privilege access controls.
Data transfers
Firebase is operated in the nam5 region. Where data is transferred outside the EEA, we rely on appropriate safeguards (e.g., Standard Contractual Clauses). We use PostHog with an EU endpoint. Google Analytics is governed by Google's policies.
Your rights
Where applicable by law, you have the right to:
- access personal data and obtain a copy,
- rectify inaccurate or incomplete data,
- erasure ("right to be forgotten") and restriction of processing,
- object to processing,
- data portability (where technically feasible),
- withdraw consent (e.g., by uninstalling the app or signing out),
- lodge a complaint with a competent authority.
Contact
Questions or want to exercise your rights? Contact us:
- Support email: hello@codewhiskers.app
- Web: https://www.codewhiskers.app/en/privacy-policy
This document combines policies for CodeWhiskers.app and the BetterShelf app. Technical details and contact information reflect the current implementation.