PRIVACY

Your finds.
Your privacy.

Notice version 2026-10-18-v1. Updated 19 October 2026.

Who is responsible

Infinite Finds is operated by Amiya Roy. For privacy questions, requests or grievances, contact [email protected]. We do not sell personal data or use account emails for marketing.

Browse without an account

You can browse without Google sign-in. Saved product IDs and theme/category/budget choices stay in this browser. The browser also remembers the save prompt, your account-consent choice and, temporarily in this tab, your discovery position and any find carried into sign-in. Guest saves stay local until you choose Google sign-in or explicitly add them to your signed-in account. Remove saves or clear site storage to remove these local details.

Optional adult accounts: data and purpose

Before Google sign-in, we ask you to confirm that you are 18 or older and agree to account processing. Google provides basic profile information including name, email, profile image and a Google account identifier. Supabase processes authentication identifiers, session/security information and sign-in timestamps. Saved product IDs and category, budget and theme preferences are stored to sync your collection and settings across devices. We record your account-consent notice version, adult declaration and acceptance time. We do not request your Gmail inbox, contacts, Drive or Google password.

Accounts are optional; refusal does not stop guest browsing. When you choose Google sign-in, the guest finds saved on this device are added to the account you choose after sign-in succeeds. Existing account saves and preferences are preserved. If you are already signed in, opening Your account automatically adds remaining guest saves from this device. Local copies are removed only after account storage confirms the import; failed imports retain them for retry. We do not combine account emails with analytics or share account collections with brands.

Under-18 visitors

Under-18 visitors may browse and save on their device without an account. Do not use Google sign-in for a child's account at this time. Child accounts are unavailable until verifiable parent consent is implemented. We do not offer targeted advertising. Under-18 visitors should choose No analytics for analytics. Guest suggestions do not use save-based behavioural learning.

Providers and location

Cloudflare hosts the website; Google provides sign-in; Supabase provides authentication and account storage. This project's database is in Tokyo, Japan. Providers may process data outside India according to their service arrangements. Network requests disclose connection information such as IP address and browser/security information. Third-party libraries and assets also involve network requests. Provider privacy information: Cloudflare, Google and Supabase.

Optional analytics: your separate choice

Google Analytics is off until you choose Allow analytics separately from account sign-in. It measures visits, device/browser and session information, product views, save/remove actions and Start exploring clicks using cookies. Product events include catalogue product IDs, names, categories and discovery/saved mode; they do not include your account email, account ID or full saved collection. Our tag strips query strings and URL fragments from the page address/referrer it supplies. Google signals and advertising personalization are disabled.

Choosing No analytics does not affect browsing or accounts. Under-18 visitors must not opt in. Use Privacy choices in the menu or footer at any time to withdraw; this stops future collection, reloads an already tracked page and attempts to remove existing first-party Analytics cookies. Your versioned choice and time are remembered in this browser. Withdrawal does not erase historical information Google already received; contact support about that. Preview websites never send Analytics. Cloudflare delivery/security logs are separate. A browser security policy blocks Cloudflare’s optional performance-beacon script.

Retention and deletion

Account data is kept to provide your account until withdrawal or deletion. Remove saves or clear preferences earlier if you choose. Withdrawal removes the active Infinite Finds login, collection, preferences and account-consent record. It does not delete your Google account. Provider backups and security logs may remain until their applicable retention periods expire, or where legally required. We do not promise immediate erasure from every backup. An inactive-account retention limit and provider log/backup schedules are being reviewed; no unverified automatic deletion schedule is claimed here.

Your controls and requests

On Your account, download your profile, saved IDs, preferences and consent information, or select “Withdraw consent and delete my account”. Deletion requires a recent sign-in and confirmation. “Clear account saves & preferences” clears that state only; it does not delete your login. For fuller access, correction, erasure, nomination to exercise rights on death or incapacity, or a grievance, email [email protected] from your registered address. We verify the relevant account without requesting your Google password. Correct Google-sourced profile details through Google.

We aim to acknowledge requests within 7 days and resolve grievances within 30 days. If more time is needed, we will explain why and the applicable deadline. Please first give us an opportunity to resolve your grievance. Where applicable law permits, you may then approach the Data Protection Board of India through its official published process. Marketing consent is not bundled with account consent.

Changes

We will update this notice and request a new choice before materially changing consent-based purposes. This notice describes the current service; it is not a claim that every future feature or legal requirement has already been implemented.