🔒

Privacy Policy

Last updated: February 2026

TL;DR

We collect the minimum we need to run Flegm — your sign-in info, what you do on the platform, and basic analytics. We don't sell your data. Ever.

1. What we collect

Account info

When you sign in, we get:

Google sign-in: your name, email, and profile picture
Email sign-in: just your email address

This is handled by Supabase Auth. We store your profile (username, avatar) so the site works.

Your activity

Videos you drop
Videos you upvote
Comments you post

This is visible to other users — that's the whole point of the platform.

Analytics

We use Google Analytics 4 to understand how people use Flegm (page views, button clicks, sign-in events). GA may collect:

Your IP address (anonymized by Google)
Browser type and device info
Pages you visit and how long you stay
Referral source (how you found us)

Cookies

We use cookies for:

Necessary: keeping you signed in (Supabase session) and storing your consent preference
Analytics: Google Analytics cookies to understand usage patterns (opt-in)
Marketing: advertising and retargeting cookies (opt-in)

Analytics and marketing cookies are only set after you give consent. You can manage your preferences any time on our Cookie Policy page.

2. How we use your data

To run Flegm — show your profile, display your votes and comments
To keep the platform safe — our moderation system scores comments for risk
To understand usage — analytics help us improve the experience
To send you sign-in links if you use email auth

3. Who sees your data

Other users: your username, avatar, dropped videos, upvotes, and comments are public
Supabase: hosts our database and handles authentication
Google: provides Analytics and OAuth sign-in
Vercel: hosts the website
Resend: sends sign-in emails and moderation alerts

We don't sell, rent, or share your personal data with advertisers or data brokers. Period.

4. Where your data lives

Our infrastructure is hosted on Supabase (cloud) and Vercel. Your data may be processed in the US or EU depending on the service. All connections use HTTPS encryption.

5. How long we keep it

Account data: as long as your account exists
Videos & comments: as long as the content is on the platform
Analytics: retained per Google's default retention policies

If you delete your account, we'll remove your personal data. Public content (comments, dropped videos) may remain anonymized.

6. Your rights

You can:

Access your data — ask us what we have
Delete your account — email us and we'll wipe it
Export your data — we can provide what we store
Opt out of analytics — use the cookie settings or a browser extension

If you're in the EU, you have additional rights under GDPR (rectification, restriction, portability, objection). Just reach out.

7. Kids

Flegm is not designed for anyone under 13. We don't knowingly collect data from children. If you're under 13, please don't use the platform.

8. Changes to this policy

We might update this policy as Flegm evolves. If we make significant changes, we'll let you know. The "last updated" date at the top always reflects the current version.

9. Contact

Got questions about your data? Email us at contact@flegm.fr