Privacy Policy

1. Information We Collect

We collect the following information:

• Account information — when you sign in with Google, we receive your name, email address, and profile photo from Google. We store this information to create and maintain your account.
• Saved references — images you save and related preferences.
• Cookies — small text files stored on your device to maintain functionality. See Section 9 for details.

We do not use third-party analytics, tracking pixels, or advertising networks.

2. Google Sign-In

LATEST uses Google OAuth 2.0 for authentication. When you sign in with Google, we access the following information from your Google account:

• Email address — used as your account identifier
• Display name — shown on your profile
• Profile photo — shown on your profile and in the navigation

We do not access your Google contacts, calendar, files, or any other Google services. We do not post to your Google account or share your Google data with third parties.

3. How We Use Your Information

• Account data — used to identify you, display your profile, and associate your saved references with your account.
• Session cookies — used to maintain your authentication state during a browsing session.
• Usage patterns — your saves and interactions may be used to improve content curation and search relevance. This processing happens server-side and is not shared externally.

4. Data Storage

Account data and collections are stored in a Supabase PostgreSQL database. Session data is managed via Supabase Auth (cookie-based) and Upstash Redis (a managed key-value store) for engagement tracking. Images are stored on Cloudflare R2 (object storage). All data is stored on infrastructure located in the United States.

5. AI/ML Processing

We generate CLIP ViT-B/32 embeddings (512-dimensional numeric vectors) from all images in our collection. These embeddings power visual similarity search, quality scoring, and auto-categorization. Embeddings are mathematical representations — they cannot be reversed to reconstruct the original image. Embeddings are stored server-side and are not shared with third parties.

6. Chrome Extension

Our browser extension captures images only when you explicitly initiate a capture (right-click menu or image picker). Data collected per capture: image URL, page URL, and page title. We do not collect browsing history, track page visits, or run analytics within the extension.

Captured images are stored on Cloudflare R2 and processed through our standard pipeline (see Section 5). Authentication uses Google OAuth via Supabase — no passwords are stored in the extension. Uninstalling the extension removes all local data; server-side captures persist in your account until you delete them or delete your account.

7. Third-Party Services

We use the following third-party services to operate LATEST:

• Google — authentication (OAuth 2.0 sign-in). Google Privacy Policy
• Supabase — authentication and database. Supabase Privacy Policy
• Vercel — web hosting and deployment. Vercel Privacy Policy
• Cloudflare — DNS, security, and image storage (R2). Cloudflare Privacy Policy
• Upstash — session and engagement data storage (Redis). Upstash Privacy Policy

We do not use third-party analytics services, advertising networks, or social media tracking pixels.

8. Data Sharing

We do not sell, trade, rent, or otherwise share your personal information with third parties. Your data is used exclusively by civilian.design for the purposes described in this policy.

9. Cookies

LATEST uses the following cookies:

• Supabase session cookies — Authentication session managed by Supabase Auth. HttpOnly, secure in production. Used to maintain your signed-in state.
• user-info — Account information (role, username). Not HttpOnly. Expires after 30 days. Used by the interface to display your profile and determine feature access.

We do not use any third-party cookies, tracking cookies, or advertising cookies.

10. Data Retention and Deletion

Account data is retained for as long as your account is active. You may delete your account at any time through the profile settings page. Account deletion is immediate and permanent — your profile, saved references, captures, and all associated data are permanently removed. Session data is retained for up to one year from your last visit and is automatically deleted thereafter.

11. Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Delete your account and all associated data (self-service via profile settings)
• Withdraw consent for data processing at any time

To exercise any of these rights, contact us at hello@latest.gallery. We will respond to requests within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

For privacy-related inquiries, please contact us at hello@latest.gallery.