Privacy policy

Last updated: 23 June 2026

HangPlanner is a small wall-planning tool run by a tiny team. We collect the minimum needed to make the app work — no ad networks, no behavioural tracking, and we never sell your data. Questions or requests? Email support@hangplanner.com and we reply within 7 days.

The short version

• Browse without an account and we store nothing on our servers.
• Sign in and we keep your email plus the walls, frames, furniture, and snapshots you create.
• Payments run entirely on Stripe — your card never touches our servers.
• No tracking cookies, no ad pixels, no data sales.
• Ask us any time to export or delete your data.

What we store

• If you don’t sign in: nothing on our servers. Your Demo wall lives only in your browser’s IndexedDB. Clear your browser data and it’s gone.
• If you sign in (email or Google): your email address and the walls, frames, furniture, and snapshots you create. This data lives on Supabase (PostgreSQL, hosted in Oregon, USA).
• Uploaded images: frame photos, wall background photos, and personal furniture images go to Supabase Storage, scoped to your user ID — you can only upload under your own folder.
• Payments (Stripe): card details (number, CVV, expiry) are entered on Stripe’s hosted checkout and never touch our servers. We store only your subscription status, plan tier, the last 4 digits of your card, and your Stripe customer and subscription IDs.
• Country (for currency and regional pricing): derived once on your first visit from your IP via Vercel’s edge headers, or from your browser timezone if that header isn’t available. We store only the 2-letter country code — never your IP address.

Third-party services

The app runs on a small set of trusted infrastructure providers. Each receives only the data it needs to do its job:

• Supabase — database, authentication, and image storage (US-West, Oregon).
• Stripe — payment processing. See Stripe’s Privacy Policy.
• Vercel — site hosting, CDN, and serverless functions. Receives request metadata only.
• Google — optional OAuth sign-in, used only if you choose “Continue with Google”.
• Zoho Mail — outgoing transactional email such as sign-up confirmations and password resets.

What we never do

• No third-party advertising trackers — no Facebook Pixel, no AdSense, no behavioural ad networks.
• No selling of email lists or any aggregated user data.
• No marketing emails unless you explicitly opt in.
• No tracking cookies. We use only your auth session token and a single flag that remembers you dismissed the sign-up prompt.

Analytics

We may use privacy-friendly analytics (such as Vercel Analytics) to count page views and see which countries our visitors come from. Our analytics never set tracking cookies, never share data with ad networks, and never identify individual users.

Your rights

Wherever you live, you can ask us to:

• send you a copy of the data we hold about you,
• correct anything that’s wrong, or
• delete your data entirely.

EU, UK, and Australian residents have these rights under the GDPR, the UK GDPR, and the Australian Privacy Act 1988 respectively. Email support@hangplanner.com from the address you signed up with and we’ll reply within 7 days.

Deleting your data

Email support@hangplanner.com from the address you signed up with and ask for deletion. We’ll remove your profile, walls, and uploaded images within 7 days and email you to confirm. Self-serve account deletion from inside the app is on our roadmap.

International data transfers

Our database and image storage are hosted in the United States (Oregon). If you sign up from outside the US, your data crosses borders. Supabase, Stripe, and Vercel all participate in recognised international transfer frameworks, including the EU Standard Contractual Clauses and the UK IDTA.

Children

HangPlanner is not directed at children under 13 (or under 16 in the EU). If you believe a child has signed up, email us and we’ll delete the account immediately.

Complaints

If you’re not happy with how we handle your data, please email us first and we’ll try to put it right. You can also escalate to your national data-protection authority — for example, the Office of the Australian Information Commissioner (OAIC) in Australia, or your country’s equivalent in the EU or UK.

Changes to this policy

We’ll update the date at the top of this page whenever material changes happen. If you have an active paid subscription, we’ll also email you about material changes.

Service provider information

HangPlanner is operated from Sydney, Australia. For privacy enquiries, data-access requests, or notice of a data incident, email support@hangplanner.com. We respond within 7 days. Postal correspondence is available on request.