Privacy Policy

When you sign in with Google. Google shares your name, email address, profile picture and a Google account identifier with us. We store these, together with the sign-in tokens Google issues, so that you can stay signed in. We never see your Google password and we do not request access to your Gmail, Drive, contacts or any other Google data.

When you sign in with an email link. We store your email address and send a one-time sign-in link to it. The link expires after 10 minutes and works once. Only a hashed form of the link token is kept in our database.

Your sessions. For each device you sign in on we keep a session record containing your IP address, your browser's user agent and the time of your last activity. A session lasts up to 30 days.

Your saved icons. The list of icons you save is stored with your account so that it follows you across devices. A copy is cached in your browser's local storage.

Anonymous save counts. When an icon is saved or unsaved we add or subtract one from a counter for that icon. The counter is not linked to your account. Your IP address is used briefly to limit abuse of this counter.

Apps you suggest. If you submit an app for the library, we store the App Store link or ID and, if you chose to provide it, your X (Twitter) username so we can credit or contact you.

Usage analytics. We use Google Analytics to understand how the site is used, such as which pages are visited and roughly where visitors come from. Google Analytics sets its own cookies and collects device and browser information and an approximate location derived from your IP address.

• Sign-in cookie. Keeps you signed in. Essential for accounts to work.
• Display preferences cookie. Remembers your choices in the Display panel, such as icon size, sorting and whether the sidebar is shown, so the page renders the way you left it.
• Local storage. Holds a cached copy of your saved icons.
• Google Analytics cookies. Used to tell visits apart. You can block them with your browser settings or with Google's opt-out add-on and the site will keep working.

We do not use advertising cookies.

• to sign you in and keep your account secure;
• to store and show your saved icons;
• to send you the sign-in emails you request. We do not send marketing email;
• to understand which parts of the site are useful and to fix problems;
• to prevent abuse, such as automated scraping or attempts to break into accounts.

We do not sell or rent your personal data. We share it only with the service providers that run the site for us:

• Zeabur hosts the application and the database where accounts and saved icons are stored.
• Cloudflare delivers the site and the icon images, and protects the site from attacks. Requests, including IP addresses, pass through its network.
• Google provides Google sign-in and Google Analytics.
• Resend delivers sign-in emails, which means it processes your email address.

These providers may process data in countries other than your own, including the United States. We may also disclose information if the law requires it, or to protect the rights and safety of APPLORE and its users.

• Account details and saved icons are kept until you ask us to delete your account.
• Sessions expire after 30 days. Sign-in links expire after 10 minutes.
• Encrypted database backups are kept for up to 12 weeks. After your account is deleted, your data may remain in those backups until they expire. Backups are used only to restore the service after a failure.
• Google Analytics data is kept according to the retention settings of our Google Analytics property.

You can sign out at any time from the account menu, and you can remove saved icons yourself. To get a copy of your data, to correct it, or to have your account and saved icons deleted, email [email protected] from the address linked to your account. We will act on the request within 30 days.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to certain processing and the right to complain to your local data protection authority. Where the GDPR applies, we rely on performance of our agreement with you to run your account, on our legitimate interests to secure and improve the site, and on your consent, where required, for analytics cookies.

APPLORE is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, email [email protected] and we will delete it.

All traffic to the site is encrypted with HTTPS. There are no passwords to leak: sign-in happens through Google or a one-time email link. Sessions are stored server-side so they can be revoked, and database backups are encrypted. No system is perfectly secure, so we cannot guarantee absolute security, but we will tell you if we learn of a breach that affects your data.

If we change what we collect or how we use it, for example when paid features are introduced, we will update this page and the effective date at the top. Significant changes will be made visible on the site.

Questions or requests about your data can be sent to [email protected].