Privacy Policy | entro.you

1. Who we are

ENTRO.you ("we", "us") lets people build a personal desktop page, with music, photos and links, at their own address. This policy covers the ENTRO.you website and the pages people publish on it. Our Discord bot has its own policy: the Rumi Privacy Policy.

Questions or requests: support@entro.you.

2. Information you give us

Your account: your email address and a password. Your password is stored in a hashed form that we cannot read. If you sign in with Google or Discord, we receive the name, email, username and picture that provider shares.
Your names: the username (address) you claim, any aliases, and the public ID number we give your page.
Your page: your display name, bio, location, links, avatar and banner, layout and theme settings, text notes, music links, and the images, audio and video you upload. If you add your Discord user ID to a Profile Card, we store it so the card can show your Discord status.
Guestbooks: if you leave a message on someone's page, we store the name you type, your message and the stamp you pick.
Payments: if you buy a paid plan, a payment processor handles the payment. We receive your plan and its status, not your card number.
Messages to us: anything you send to support.

3. Information collected automatically

Visit counts. To count visits to a page, we turn a visitor's IP address and browser details into an anonymous code that cannot be turned back into either. It lets us count each visitor once per 24 hours. We never store the IP address itself, and the page's owner sees only the total.
Server logs. Our hosting systems record technical details of each request, such as IP address, browser type and the page asked for, to run and protect the service.
Cookies and local storage. We use essential cookies to keep you signed in, and local storage to remember your light or dark mode and your chosen look. We do not use advertising or analytics cookies, and we do not use third-party analytics.

4. How we use it

to run your account and keep you signed in;
to store and show your page, and to let visitors sign guestbooks;
to count visits, and to stop spam and abuse;
to process payments and give you the plan you bought;
to answer support requests, keep the service secure, and meet legal duties.

We do not sell your personal data, use it for advertising, or use it to train AI models.

5. What is public

A page you publish is public: its address, display name, content, uploaded media, links and ID number can be seen by anyone, along with guestbook messages once they are approved. A page you have not published is private to you. Do not put anything on a published page that you do not want others to see.

6. Who else handles your data

We share data only with the kinds of services that help us run ENTRO.you:

hosting, database, sign-in and file-storage providers;
a payment processor, if you buy a paid plan;
Embedded media. When a visitor plays a track on a page, their browser connects to the music service that provides the player, which has its own privacy policy. We also ask those services for the title and thumbnail of links people add;
services that serve page fonts, which see the visitor's IP address;
Discord status. If you add your Discord user ID to a Profile Card, we fetch your public Discord status from a third-party status service so the card can show it. Visitors' details are not sent to it;
Password safety. When you choose a password, we may check it against lists of known breached passwords in a way that never reveals the password;
Discord, through Rumi. If you link your Discord account, see the Rumi Privacy Policy.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of ENTRO.you. These providers may process data in countries other than yours.

7. How long we keep it

Account and page data stays until you delete your account or ask us to remove it.
Visit-count hashes are kept for as long as the page exists and are deleted with it.
Guestbook messages stay until the page owner deletes them or the page is deleted.
Server logs are kept for a limited time.
After you ask us to delete something, we remove it from our systems within 30 days. Backups may take a little longer to clear.

8. Your choices and rights

Wherever you live, you can:

edit or remove your page content, or unpublish your page, at any time from your dashboard;
ask us for a copy of the personal data we hold about you, and ask us to correct it;
ask us to delete your account and everything on it;
delete the guestbook messages on your own page, or ask us to remove one you wrote.

To use any of these, email support@entro.you. If you think we have handled your data unlawfully, you may also complain to your local data protection authority.

9. Security

We store passwords in hashed form, limit who and what can reach your data, check what is uploaded, and encrypt traffic in transit. No service is perfectly secure, so we cannot promise absolute security. Use a strong, unique password.

10. Children

ENTRO.you is not for children under 13, or under the minimum age for online services in your country if higher. We do not knowingly collect information from them. If you think a child has given us information, email us and we will delete it.

11. Rumi, our Discord bot

What Rumi handles in our Discord server is covered by the Rumi Privacy Policy, which is part of this policy for anything to do with Rumi. If you link your Discord account to your ENTRO.you account, we receive your Discord ID, username, avatar, public badges, Nitro type and online status as described there, and can show them on your profile. You can unlink at any time.

12. Changes to this policy

We will update this page when our practices change and change the date at the top. For significant changes we will tell you on the website.