Privacy Policy

Effective September 13, 2026

This policy explains how Carlos Santos ("we", "us"), operating Yuki, collects and handles personal data. We are the data controller for the information described here.

In short: we collect the minimum needed to run an account and show you reviews. We do not use analytics or advertising trackers, we do not sell your data, and we do not share it with third parties for their own purposes.

1. Information we collect

Account information

When you register, we store:

• your name and email address;
• a hashed password, if you register with email and password;
• your profile image and provider account identifier, if you register through GitHub or Google;
• whether your email address has been verified; and
• the dates your account was created and last updated.

We never store your password in readable form. If you sign in with GitHub, we request access to your email address only. If you sign in with Google, we receive your basic profile and email. We do not receive your password from either provider.

Content you submit

If you write a review, we store its rating, text, and timestamps, linked to your account. Reviews are public and display your name and profile image.

Preferences

We store your preferred device architecture on your account, and your preferred catalog view mode in a cookie on your device, so the site behaves consistently between visits.

Technical information

Our servers process standard request data, including IP address, browser user agent, and requested pages, as an inherent part of delivering the site and protecting it from abuse. We do not combine this into advertising or behavioral profiles.

What we do not collect

We do not use analytics services, advertising networks, tracking pixels, or third-party cookies. We do not track your activity across other websites. We do not collect precise location data, and we have no access to anything on your Android device.

2. Cookies

We use cookies that are strictly necessary to operate the site:

• Session cookies keep you signed in and protect against cross-site request forgery. They are cleared when you sign out.
• Preference cookies remember display choices such as view mode and light or dark theme.

Because these cookies are essential to providing a service you have requested, they do not require consent under the ePrivacy Directive. We set no advertising or analytics cookies. You can clear cookies in your browser, though doing so will sign you out.

3. Why we use your data, and our legal basis

We send only transactional email — address verification and password resets. We do not send marketing email.

4. Who we share data with

We do not sell your personal data, and we have never sold it. We do not share it with third parties for their own marketing. We disclose data only to:

• Infrastructure providers that host our servers, database, and email delivery, acting as processors on our instructions and bound to protect your data;
• Authentication providers (GitHub, Google) when you choose to sign in through them, limited to completing that sign-in; and
• Legal authorities, where we are required by valid legal process, or where disclosure is necessary to protect our rights or someone's safety.

If the service is ever transferred to another operator, your data may transfer with it. We will give notice before that happens and before any different policy applies to you.

Reviews you post are public by design and visible to anyone, including search engines. Please do not include personal information in review text.

5. International transfers

We operate from the United States, and our infrastructure providers may process data there or in other countries. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum, to provide an appropriate level of protection. You may request details of these safeguards using the contact address below.

6. How long we keep data

• Account data is kept while your account is open.
• Reviews are kept until you or we delete them. If you delete your account, your reviews are deleted with it.
• Sessions expire automatically and are removed when you sign out.
• Backups containing deleted data are overwritten in the normal backup rotation, within 30 days.

After you request deletion, we remove your personal data within 30 days, except where we must retain something to comply with a legal obligation or to resolve a dispute.

7. Security

We protect data in transit with TLS, hash passwords using a slow, salted algorithm, verify email addresses before activating accounts, and restrict database access. No system is perfectly secure, but if a breach affects your personal data and poses a risk to you, we will notify you and the relevant supervisory authority as required by law.

8. Your rights

We extend the following rights to all users, wherever you live, rather than only where law compels it:

• Access — obtain a copy of the personal data we hold about you.
• Correction — have inaccurate data corrected.
• Deletion — have your account and personal data erased.
• Portability — receive your data in a machine-readable format.
• Objection and restriction — object to or limit processing based on legitimate interests.
• Withdraw consent — where processing relies on consent, withdraw it at any time.
• Non-discrimination — we will not degrade your service or charge you differently for exercising these rights.

To exercise any of these, email [email protected] from the address on your account. We respond within 30 days and will ask for verification before acting on a request. You may use an authorized agent to submit a request on your behalf.

Because we do not sell or share personal data for cross-context behavioral advertising, there is no opt-out to offer under California law, and we do not process sensitive personal information for purposes requiring a right to limit.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.

9. Children

Yuki is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, write to [email protected] and we will delete it.

10. Third-party services

Yuki links to GitHub and to files published there. When you follow a link or download a release, that request goes to GitHub and is subject to GitHub's privacy policy, not this one. Applications you install handle their own data under their developers' terms. We have no visibility into or control over those practices.

11. Changes to this policy

We may update this policy. When changes are material, we will update the effective date above and notify account holders by email before they take effect. Previous versions are available on request.

12. Contact

Carlos Santos, Florida, United States
[email protected]

See also our Terms of Service.