Privacy Policy

1. Introduction

This Privacy Policy explains how Pomme ("we", "us", "our") collects, uses, and protects your information when you use our website, desktop application, and API (collectively, "the Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address and username. Sign-in uses one-time codes sent to your email; we do not collect or store passwords. If you sign in via Microsoft or Discord, we receive your profile information from those providers.

Usage Data

We collect basic usage data including download counts, page views, and IP addresses for rate limiting. IP addresses are not stored permanently and are only used for security and abuse prevention.

Content You Upload

When you publish resources, we store the files, metadata, and associated information you provide.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Display download and follower counts on projects
• Enforce rate limiting and prevent abuse
• Moderate content and enforce our Terms of Service
• Communicate with you about your account or the Service

4. Data Storage and Security

Your data is stored on servers located in Europe (Hetzner, Germany). Files are stored using Cloudflare R2. We use industry-standard security measures including encrypted connections (HTTPS), one-time email codes for sign-in, and JWT-based authentication.

5. Third-Party Services

We use the following third-party services:

• Cloudflare - CDN, edge hosting, and object storage
• Microsoft - OAuth authentication (optional)
• Discord - OAuth authentication (optional)
• Umami - self-hosted, cookieless analytics (only with your consent)

These services have their own privacy policies. We only share the minimum information necessary for authentication.

6. Data Retention

Account data is retained as long as your account exists. If you delete your account, your personal data will be removed. Published content may be retained if other users depend on it, but your name and personal information will be disassociated.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your data in a portable format

To exercise these rights, contact us at contact@pomme.rs.

8. Cookies & Analytics

We use a small number of essential first-party cookies that are required for the Service to work: one keeps you signed in, and a short-lived one secures the OAuth login flow. These are strictly necessary and cannot be turned off. We do not use advertising or cross-site tracking cookies.

With your consent, we also use privacy-friendly, cookieless analytics (self-hosted Umami) to understand how the Service is used. It collects the pages you view, the site that referred you, and your device, browser, and operating system, and derives an approximate location (country) from your IP address. It does not use cookies, does not store your IP address, and does not track you across other websites. Analytics stays off until you accept it, and you can change your choice at any time via the cookie banner or the “Cookie Preferences” link in the footer. Your preference is stored locally in your browser.

Download and view counts are anonymous aggregates: we record only which resource was downloaded or viewed, never who. They contain no personal data and are not tied to your account.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at contact@pomme.rs.