Privacy Policy
Last updated: October 20, 2026
We never sell, rent, or trade your personal data to advertisers or data brokers.
Payment details are processed directly by Lemon Squeezy (PCI-DSS Level 1).
All data is encrypted in transit (TLS) and at rest via Supabase infrastructure.
1. Introduction
At Yearce ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit or use Yearce, as well as your rights under GDPR, CCPA, and applicable privacy laws.
2. Information We Collect
- Account & Profile Data: When you create an account, we collect your display name, username (handle), email address, optional bio, and avatar URL.
- Publicly Published Content: The annual Yearces you publish, including text, tags, optional cover media, links, and community reactions, are stored as part of the public Yearce archive.
- Payment & Billing Information: All payment transactions are processed by our Merchant of Record, Lemon Squeezy. Yearce never collects or stores your credit card details. We only receive confirmation of your order status, chosen tier, and billing metadata required to activate your plan.
- Technical & Preference Data: We use browser local storage and essential cookies to remember your interface language (EN, TR, ES, DE), theme preference (Light/Dark mode), and authentication session.
3. How We Use Your Information
We use your information strictly to:
- Provide, maintain, and authenticate your Yearce account and display your annual publications.
- Verify and activate your selected annual tier (Yearce Mini, Yearce Pro, or Yearce Max).
- Maintain platform security, prevent abuse, and enforce our Terms of Service.
- Send transactional notices (receipts, security alerts) and respond to support requests.
4. Third-Party Service Providers (Subprocessors)
We share minimal necessary data only with trusted infrastructure providers required to operate Yearce:
| Provider | Purpose | Compliance |
|---|---|---|
| Supabase | Database & Authentication | SOC2 Type II / GDPR |
| Lemon Squeezy | Merchant of Record & Checkout | PCI-DSS Level 1 / GDPR |
| Vercel | Application Hosting & CDN | ISO 27001 / SOC2 |
5. Data Retention & Your Privacy Rights
Depending on your jurisdiction (including the EEA, UK, California, and Turkey), you have the right to:
- Access & Portability: Request a copy of your personal data and exported archive of your published Yearces.
- Correction: Update or correct inaccurate account information at any time.
- Deletion (Right to Erasure): Request permanent deletion of your account and personal data by contacting support@yearce.com.
6. Contact Us
If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: support@yearce.com