Privacy Policy

Last updated: December 20, 2024

1. Introduction

Welcome to MakeItLast ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at makeitla.st.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

  • Email address
  • Name (if provided via Google sign-in)
  • Username (chosen by you)
  • Profile information (bio, location, website - optional)
  • Profile picture (optional)

2.2 Goal and Activity Data

When you use our service, we collect:

  • Goals you create and their details
  • Progress updates and milestones
  • Public/private visibility preferences
  • Payment tracking data (if you connect payment providers)

2.3 Payment Information

Payment processing is handled by our third-party payment processor (Dodo Payments). We do not store your credit card information. We only receive confirmation of successful payments and associated email addresses.

2.4 Automatically Collected Information

We automatically collect certain information when you visit our website:

  • IP address
  • Browser type and version
  • Device information
  • Usage data and analytics (via Vercel Analytics)

3. How We Use Your Information

We use the collected information for:

  • Providing and maintaining our service
  • Processing your account registration and payments
  • Displaying your public goals and profile to other users
  • Sending you authentication emails (magic links)
  • Syncing your revenue data from connected payment providers
  • Improving our service and user experience
  • Communicating with you about service updates

4. Information Sharing

4.1 Public Information

When you create public goals, your username, profile picture, bio, and public goals are visible to anyone who visits your profile page. You control which goals are public or private.

4.2 Third-Party Services

We share information with the following third-party services:

  • Dodo Payments: For payment processing
  • MongoDB: For data storage
  • Cloudinary: For image storage (profile pictures)
  • Resend: For sending authentication emails
  • Vercel: For hosting and analytics
  • Google: For OAuth authentication (if you choose Google sign-in)

4.3 Payment Provider Connections

If you connect payment providers (Stripe, Polar, Lemon Squeezy, Dodo) for revenue tracking, we access only the revenue data necessary to update your goal progress. API keys are stored securely and encrypted.

5. Data Security

We implement appropriate security measures to protect your personal information, including:

  • HTTPS encryption for all data transmission
  • Secure authentication using JWT tokens
  • Content Security Policy (CSP) headers
  • Regular security audits and updates
  • Encrypted storage of sensitive data (API keys)

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Change your goals from public to private
  • Disconnect payment provider integrations

To exercise these rights, please contact us at kalash@makeitla.st.

7. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (Vercel Analytics) to understand how our service is used. These cookies do not track you across other websites.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: