Legal
Privacy Policy
Last updated: 14 May 2026
1. Who this applies to
This policy describes how portfol.site (“we”, “us”) handles personal data when you use our website and service.
For questions about this privacy notice, you can contact us by email at dovyr.websites@gmail.com.
2. What portfol.site is
portfol.site lets you create and publish a personal portfolio page. What we process depends on whether you register an account, subscribe to a paid plan, or only browse our marketing site or a user's public portfolio.
3. Data we process
3.1 Account and portfolio content (Supabase)
We use Supabase for authentication, database, and file storage. This includes data needed to create and secure your account (for example your email address and password, or Google sign-in if you choose it), and content you add (portfolio text and structure, and images you upload).
Purpose / legal basis: providing the service you request (performance of a contract, Art. 6(1)(b) GDPR).
3.2 Payments (Stripe)
Paid subscriptions are processed by Stripe. Card and bank details are collected and processed by Stripe under their terms and privacy policy. We process related billing metadata (for example Stripe customer and subscription identifiers) to manage your plan.
Purpose / legal basis: performance of a contract (Art. 6(1)(b) GDPR).
3.3 Website usage (Vercel Analytics)
We use Vercel Web Analyticson our own marketing site. What is collected is described in Vercel's documentation and privacy materials.
Purpose / legal basis: legitimate interests in understanding and improving our website (Art. 6(1)(f) GDPR), where applicable.
3.4 Visitors of published portfolio pages (first-party analytics)
For published portfolio URLs, our application records aggregated usage events for the portfolio owner, such as page views, clicks on link blocks (including the visible link label stored with the event), and approximate time on page. Events use a random session identifier in the browser for that visit; we do not use this feature to identify visitors by real-world identity.
Purpose / legal basis: legitimate interests of portfolio owners in simple traffic statistics (Art. 6(1)(f) GDPR). Where applicable, you may object; use the contact in section 1.
3.5 Cookies, storage, and technical logs
We use cookies and similar technologies required for authentication (Supabase session) and, on public portfolios, for the analytics session identifier in browser storage. Hosting providers, including Vercel, process technical data (for example IP address and timestamps) when pages are requested, as needed to deliver and secure the service.
Purpose / legal basis: contract where necessary for the service; otherwise legitimate interests in security and stable operation (Art. 6(1)(b) and (f) GDPR); consent where required for non-essential technologies (update this section if you add any).
4. Recipients and transfers
Personal data is processed by us and by processors we use: Vercel (hosting and analytics), Supabase (authentication, database, storage), and Stripe (payments). They may process data outside your country (including outside the EEA). Their privacy notices describe international transfers and safeguards (such as Standard Contractual Clauses).
5. Retention
We keep data as long as your account exists and as needed for billing, accounting, and legal claims, then delete or anonymise it where we are not legally required to retain it longer.
6. Your rights (EEA / UK, where applicable)
You may have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with a supervisory authority. Use the contact in section 1 to exercise these rights.
7. No sale of personal data
We do not sell your personal data in the sense of a “sale” under common privacy laws.
8. Children
The service is not directed at children. Do not register if you are below the age at which you may lawfully consent in your country.
9. Changes
We may update this policy and will adjust the “Last updated” date. We will communicate material changes as required by law.