Privacy Policy

Abunch ("we", "us", or "our") operates abunch.io. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

• Device and connection information — such as your IP address, browser and device type, language and time zone.
• Request logs — our hosting provider records technical details of each request, such as the IP address, the browser (user agent), the full address requested (including any query string), the referring page, the response status and timing. We use these logs to operate, secure and debug the service.

Product usage information — understanding whether the service actually works for you

When you use Abunch, we record information about how you use Abunch itself — for example, when and how often you use Abunch, which features you use, whether you look at pricing or start a checkout, whether an import worked or ran into a limit, how your plan changes, where content on your board came from, and how you arrived at Abunch, including the page you first landed on.

We do not follow you across other websites. We do not sell this information or use it for advertising by other companies. We share it only as described in Section 4. We use it to understand whether Abunch is working for the people using it, and to improve it.

Usage events have been recorded since July 19, 2026. Newer types are recorded from the date each is introduced.

1.3 Information from Third Parties

When you sign in with Google, we receive from Google your Google account email address, display name, profile photo URL (if available), and the sign-in details Google provides for your account, such as an account identifier. We do not receive your Google password.

1.4 Payment Information

We do not collect or store your payment card information. All payment processing is handled by Paddle, our payment processor. For more information on how Paddle handles your data, see Paddle's Privacy Policy.

2. How We Use Your Information

• Providing the Abunch service (account management, saving your links, categories and other content)
• Authentication and account security (for example verifying your identity on each request, limiting repeated sign-in attempts, and checking new passwords against known leaked passwords)
• Sending the emails described in Section 3
• Operating, monitoring and debugging the service
• Understanding how people use Abunch — including how they arrive, whether they come back, which parts they use, and how boards are organized (for example how many categories and links an account has, category names, and the websites saved, by domain rather than full address) — so we can tell whether the service works and improve it
• Processing payments (email passed to Paddle, subscription status management)

We do not sell your data, use it for advertising by other companies, or share it with third parties except as described in Section 4.

3. Email Communications

We send you email for service and account reasons — things like:

• Verifying your email address
• Resetting your password
• A welcome email when you create your account
• Notices about your account, such as a plan change, a scheduled deletion, or a link on your board that was disabled for safety

These are examples, not the complete set of messages we may need to send for these reasons. New message types appear as features are introduced. Payment receipts and subscription confirmations are sent by our payment provider, Paddle, rather than by us.

If you choose to receive them, we may also send you emails about Abunch, such as news, new features and offers. You can stop these at any time by replying to one or writing to service@abunch.io. Emails for the account reasons above, and notices of changes to this policy or our Terms, are still sent after you stop the others.

4. Third-Party Services

We share your data with service providers only as needed to run Abunch, including:

We may also use service providers to analyze de-identified usage information. They receive a code in place of your email address, never the address itself.

We do not sell your personal data to any third party.

Site icons

Any page that shows links — your board, public collections, and pages that can be viewed without an account — displays a small icon for each site. To load those icons your browser may send a request to the linked website itself or, for links that came from our published collections or starter packs, to Google's public favicon service. Those requests come from your browser, so whoever receives one can see things like your IP address and browser version in their own logs. We do not send your account details with them.

5. Data Storage and Security

Your data is stored on Google Cloud Platform servers in us-central1 (Iowa, USA). Security measures include:

• Passwords hashed with bcrypt
• All data in transit encrypted via HTTPS/TLS
• Database reachable only through Google Cloud's authenticated connection service and over encrypted connections — no network can connect to it directly
• API authentication with short-lived tokens that rotate
• All secrets stored in Google Cloud Secret Manager

6. Data Retention

7. Your Rights

You may have the following rights regarding your personal data:

• Access & Export — Download your data from Settings (JSON format)
• Correction — Update your profile in Settings
• Deletion — Delete your account in Settings. Your data is permanently deleted 30 days after the deletion request, except as described in Section 6.
• Other requests — Contact service@abunch.io

Product usage information is not included in the Settings export. To request a copy, email service@abunch.io.

8. Children's Privacy

Abunch is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact service@abunch.io and we will delete the account.

9. Cookies and Browser Storage

See our Cookie Policy for details. In summary: Abunch keeps a small number of items in your browser — to keep you signed in, to keep a board you build before signing up, to remember small choices and notices, and to remember for up to 30 days how you first arrived. We set one short-lived cookie during Google sign-in. We do not use advertising cookies or tracking pixels. Usage information is recorded on our servers, not in cookies (Section 1.2). Third-party services (Paddle, Google sign-in, Cloudflare's bot check) may set their own cookies or storage when you use them.

10. International Data Transfers

Our servers are in the United States (Google Cloud Platform, us-central1). If you are accessing Abunch from outside the United States, your data is transferred to the US for processing. Some of our service providers may process data in other countries. We rely on standard contractual clauses and the data processing agreements of our sub-processors to ensure adequate protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last Updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions, requests, or to exercise your rights — we aim to respond within 30 days:

• Email: service@abunch.io
• Website: abunch.io/about