Privacy Policy

MadeKeeper ("we," "us") is the back office for people who make things and sell them. This policy covers madekeeper.com and the MadeKeeper app at madekeeper.com/app. The short version: we collect what the product needs to work and nothing more, we never sell data, there are no ads, and you can take your records with you or have them deleted whenever you like.

What we collect

If you're just visiting the site

• Cookieless analytics. We count page views, clicks on our own buttons, and how far people scroll, using our own lightweight beacon plus Cloudflare's cookieless web analytics. The beacon uses a random identifier stored in your browser — it isn't your name, your email, or an advertising ID, and we don't use it to follow you around other sites. No advertising trackers, no third-party ad networks, no fingerprinting.
• The founding-pilot signup. If you leave your email to lock the founding rate, we store that email, the optional "what do you make?" note, and where on the site you signed up. We use it to contact you about the pilot — nothing else, and never a purchased or sold list. Reply "stop" to any email and we stop.

If you create an account

• Your login. An email address and a password, handled by Supabase (our database and authentication provider). We never see or store your password in readable form.
• Your business records. The materials, recipes, products, sales, events, mileage, expenses, and notes you enter. These are your books. Each account's rows are isolated at the database level (row-level security), so your records are readable by you and no one else's account.
• Your photos. Product photos you upload live in a storage bucket. One honest caveat: uploaded photos get a direct web address so the app can display them. That address isn't listed or guessable, but anyone you share it with could view the photo — so upload the kind of photo you'd put on a product listing, not private ones.

Why we collect it

One reason: to run MadeKeeper for you. Your records power your own dashboard, your event math, and your year-end packet. The analytics tell us which pages help and which confuse. That's the whole list — we don't mine your books for marketing, train models on them, or share them with anyone who'd want to.

Where it lives

• Supabase (database, authentication, and file storage, hosted in the United States) holds your account and business records.
• Cloudflare serves the website and app pages, and provides the cookieless visitor analytics. Like any host, its infrastructure keeps standard server logs (IP address, browser type) for security and reliability.

That's the full roster. There is no ad network, no data broker, and no "trusted marketing partner" on this list — and there won't be.

The weather lookup

If you put a ZIP code on an upcoming event, the app looks up the forecast so you know what your booth day looks like. That lookup runs from your own browser: the ZIP goes to a free geocoding service (zippopotam.us) to get coordinates, and the coordinates go to the National Weather Service (api.weather.gov). Only the ZIP and coordinates are sent — never your name, email, or records. Skip the ZIP and no lookup happens.

Your rights

These apply to everyone, not just where a law makes us say so (California's CCPA and Europe's GDPR both cover the same ground):

• Access and portability. Your records are exportable from the app as CSV any time, no permission needed. If you want a fuller copy of everything we hold, email us and we'll send it.
• Correction. Everything you enter, you can edit in the app.
• Deletion. Email us and we'll delete your account and records. We may keep the minimum required for legal or tax reasons (for example, billing records once billing exists), and we'll tell you if so.
• The signup list. Reply "stop" to any pilot email and you're off it.

To exercise any of these, email [email protected]. A person answers — the same person who built the app.

Security

Everything travels over HTTPS, and each account's records are walled off with row-level security in the database. No system is perfectly secure, and we won't pretend otherwise — but the boring, standard protections are all in place, and the surface area is small on purpose.

Children

MadeKeeper is a business tool for adults. It isn't directed to children, and we don't knowingly collect their information.

Changes

If this policy changes, the date at the top changes with it, and for anything material we'll take reasonable steps to tell you directly. We won't quietly swap a plain policy for a worse one.

Contact

Questions or requests: [email protected]. (While we finish setting up mail on this domain, [email protected] reaches the same person.)