Privacy Policy

The short version

Creating an account only ever asks for a username and a password. We don’t collect your email, your name, your location, or any other identifying detail — because we never ask for them. Since nothing personally identifying is required to sign up, your username and password can be any format and any length: there’s no minimum length, no required character mix, and no real-world identity check behind them. Pick anything you’ll remember.

What we store

An account on StyleBook has exactly four kinds of data behind it, all in one Postgres database:

• Your account — a username, a bcrypt hash of your password (never the password itself, and never logged anywhere in plain text), and the date you signed up.
• Your projects — the design systems you build or generate and choose to save: palette, fonts, type scale, and (if you used AI Generate) the prompt you typed and the reasoning Gemini returned.
• Your favorites — which colors, fonts, or themes from the library you’ve starred.
• Figma export codes — a short-lived, random one-time code created only when you click “Export to Figma.” It holds the design tokens for one export, isn’t linked to your account in the database, expires automatically after 30 minutes, and is deleted the moment the Figma plugin redeems it.

That’s the entire list. Nothing else about you is recorded, inferred, or purchased from anywhere else.

Cookies

StyleBook sets exactly one cookie — stylebook_session — an httpOnly, signed token that keeps you signed in for 30 days. It’s strictly necessary for the sign-in feature to work at all; it’s not used for tracking, isn’t shared with anyone, and there’s nothing else riding along with it. Signed-out visitors get no cookie of any kind.

Analytics and tracking

There is no analytics platform, ad pixel, or third-party tracking script anywhere in StyleBook — not Google Analytics, not a heatmap tool, nothing. We don’t know what pages you visited before this one, and we don’t build a profile of how you use the app.

Who else sees your data

Two infrastructure providers are involved in running StyleBook, and neither sees more than they need to do their one job:

• Supabase hosts the Postgres database described above — your account, projects, and favorites live there, encrypted at rest by Supabase’s own infrastructure.
• Google (Gemini API) only comes into play if you use AI Generate. The brand description you type is sent to Google’s Gemini API to produce a palette, font pairing, and type scale — that’s the only feature that sends anything you type to a third party, and it only happens when you actively click generate.

We don’t sell data, share it with advertisers, or use it for anything beyond making the product work.

Deleting your data

You’re in full control of this yourself — no support ticket required. From Account settings, “Delete account” permanently removes your user record and, with it, every project and favorite tied to it. There’s no recovery window and no soft-delete: once it’s gone, it’s gone from our database immediately.

Accessibility preferences

The visual accessibility settings in Account settings (high contrast, larger text, and similar) are stored only in your browser’s localStorage — they never touch our server or database at all, and they don’t transfer between devices.

Children’s privacy

StyleBook isn’t directed at children and isn’t knowingly used to collect data from anyone under 13.

Changes to this policy

If what StyleBook collects ever changes, this page will change with it and the “Last updated” date above will move. There’s no mailing list to notify, since we don’t collect the email address that would require.

Questions

For anything not covered here, reach out at kabiroscope@gmail.com.