QubitSells / privacy
Privacy policy
This page explains the data flows implemented in QubitSells. Last updated 21 October 2026. Our website is qubitsells.com; the support mailbox is support@qubitsells.com and is pending activation.
Account and sign-in information
QubitSells uses Supabase for authentication and application data. If you choose Google sign-in, Supabase receives the profile information Google authorizes, such as your email and basic profile. QubitSells uses your account ID, email, and profile fields for sign-in and account features. The app does not request Gmail, Contacts, Calendar, or Drive access.
Gift and interaction content
We process the names, messages, photos, audio, selected music, and optional tool settings you submit to create your gift. Recipient replies, votes, invitation responses, and other supported interactions are stored so the gift creator and authorized participants can use them. Microphone access is requested only when you choose to record audio.
Shared links and private content
A template link is accessible to anyone who has it until expiry or deletion; it is not protected by recipient sign-in. Share it carefully. Creator management links grant management access and must stay private. Couple profiles, capsules, and stored private media use separate server-side ownership and membership checks. A couple connection is not required for general gift creation.
Orders, wishlist, reviews, and notifications
Orders and wishlists belong to your individual account. Reviews require a paid order and publish your display name, star rating, title, and review text. In-app notifications summarize order updates and template activity without displaying private answers or media. Review requests may appear after a purchase. Test reviews are labelled and excluded from live ratings.
Service providers
Supabase stores account and application records. Cloudinary processes uploaded media through our server. Selecting or playing external music may contact Free To Use or YouTube, and choosing Google sign-in contacts Google. These providers process the network and content information needed for those features. Stripe processes checkout payments and sends payment-status updates to our server. We store product, duration, payment references, and order status; we do not store full card numbers.
Cookies, browser storage, and security
The app uses session cookies, guest upload ownership cookies, and creator management cookies to maintain sign-in and authorize content controls. It also uses browser storage for creator history and app state. The server uses a salted hash of network address information where available to limit abuse. The current storefront does not add advertising trackers, analytics scripts, or a mailing list.
Retention and deletion
Purchased links remain live for 3, 7, or 30 days from publication, according to the chosen order. Expired links stop working. The cleanup system schedules expired templates, replies, and associated media for removal and retries failed media deletion. Abandoned uploads are scheduled for cleanup after 24 hours. Account and capsule records remain until deleted through their applicable controls; template expiry does not delete a separate account or capsule. Recipient downloads, screenshots, and offline copies cannot be removed remotely.
Your choices and questions
You can choose which content to upload, disable optional interactions, and choose a template expiry. Use the original browser or private creator management link to delete a template. Available account and capsule controls allow their owner to manage or delete content subject to shared capsule rules. Contact QubitSells at the planned support address once its mailbox is active for help with a privacy request.