Last updated: March 2026
When you create an account, we store your display name, username, email address, and a bcrypt-hashed password. Your plaintext password is never stored.
When you use the platform, we store:
We do not sell your data. We do not share your email or personal information with third parties. Your email address is never displayed publicly — it is only visible to you on your own account settings page.
When you log in, we set a secure, HTTP-only cookie named auth-token containing a signed JWT (JSON Web Token) that expires after 7 days. This cookie is used to authenticate your requests. It cannot be read by JavaScript running on the page and is transmitted only over HTTPS.
No third-party tracking cookies are used for authentication.
We track page views on blog articles to show view counts. Views are deduplicated once per viewer per day. For logged-in users the view is tied to your userId; for anonymous visitors it is tied to your IP address. Raw IP addresses are not stored after deduplication.
We may additionally use Vercel Analytics (privacy-respecting, aggregate-only) to understand traffic patterns. No personally identifiable data is shared with Vercel Analytics.
Some UI state (dark mode preference, QuoteStore read-state) is stored in your browser's localStorage. This data never leaves your device.
Your account data is retained until you request deletion. To delete your account and all associated data (comments, likes, favorites, bookmarks), contact us at the address below and we will process your request within 14 days.
We may update this policy when the platform changes. The "last updated" date at the top of this page reflects the most recent revision.
Questions? Reach us at hello@uixplor.com or via our Contact page.