Privacy Policy

1. Introduction

Creator Dash is a platform for building and customizing a public creator profile — a single page that brings together your links, your look, and the platforms you create on. This policy explains what information we collect when you use Creator Dash, how we use it, and the choices you have. Your privacy matters to us, and we designed Creator Dash to collect only what the service actually needs to work.

2. Information we collect

When you use Creator Dash, we collect:

• Account information. An email address and password, or, if you sign in with a supported third-party provider instead, the information permitted by that provider’s authorization flow, which may include your email address, username, avatar, and public profile information.
• Profile information. Display name, username, bio, avatar, and banner image.
• Customization data. Theme, accent color, card transparency, background media, animated border and cursor effects, and music player settings.
• Uploaded files. Any avatar, banner, or background media you upload is stored and served publicly at a stable URL, since it is meant to appear on your public profile.

3. Connected accounts

Creator Dash supports connecting accounts from GitHub, TikTok, YouTube, Instagram, X/Twitter, LinkedIn, Twitch, and Discord. Connecting an account is entirely optional — your profile works without any of them.

• We request only the permissions needed to display your public username, avatar, and profile link on that platform — nothing more.
• Depending on the provider and the permissions you grant, we may receive your public username, avatar, and public profile information.
• Access tokens are stored securely on our servers, in a part of our database that is never exposed to browsers or to other users — your dashboard cannot read them, and neither can visitors to your profile.
• You can disconnect any linked account at any time from your dashboard.

4. Analytics data

When someone visits your public profile, we record a profile view; if they click one of your links, we record a link click. Together these power your Analytics tab. Each record may include a timestamp, the referring page (if any), and the visitor’s IP address.

IP addresses are used only to prevent the same visitor from inflating your view count by reloading the page, within a rolling 24-hour window. IP addresses are never sold, never shown publicly, and never displayed to you as the profile owner — only you can see your own aggregated analytics, and only in summary form.

5. Cookies

We use a session cookie to keep you signed in, and short-lived cookies during the account-connection flow to protect against forged requests. We do not use advertising or cross-site tracking cookies.

6. Public information

Your profile page — display name, username, bio, avatar, banner, theme, and connected account list — is public by design. Anyone with your link, or who finds you on the homepage leaderboard, can view it. Do not include anything in your profile that you want to keep private.

7. Third-party services

We rely on Supabase to host accounts, profile data, and file storage. Track artwork and titles for the music player are fetched from Spotify’s, YouTube’s, or SoundCloud’s own public oEmbed endpoints at the time you add a track. Connecting an account routes you through that platform’s own sign-in page, and your use of it is governed by that platform’s own privacy policy.

8. Data security

We use reasonable technical safeguards to protect your information, including secure storage practices and strict server-side protection of authentication credentials and OAuth tokens, which are never exposed to the browser. That said, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

9. Data retention

We keep your information for as long as your account exists. You can permanently delete your account and its associated data at any time from Settings → Danger zone. Some information may be retained where required by law or needed for legitimate security purposes, such as preventing abuse.

10. Children’s privacy

Creator Dash is not directed at children and is not intended for use by anyone who does not meet our minimum age requirements. We do not knowingly collect personal information from children who are not permitted to use the service.

11. International users

Creator Dash is available to users outside the United States. If you use the service from outside the United States, your information will be processed in the United States, which may have different data protection laws than your home country.

12. Your rights and choices

• Access and update your profile information at any time from your dashboard.
• Disconnect any linked account at any time.
• Permanently delete your account and its data from Settings → Danger zone.
• Contact us with any question about your data or this policy.

13. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page.

14. Contact us

Questions about this policy or your data: support@xol.bio