Privacy Policy

What we collect

When you create an account or sign in with Google or GitHub, we store:

• Your email address
• Your display name (if provided by you or your OAuth provider)
• Your profile image URL (OAuth sign-in only)
• Which provider you used to sign in (Google, GitHub, or email/password)
• The timestamp your email was verified

If you register with email and password, we store a bcrypt hash of your password. We never store your password in plain text.

What we do not collect

• We do not track your activity on the site
• We do not use cookies beyond what is required for your login session
• We do not collect payment information
• We do not build advertising profiles

How we use your data

Your email and account information are used solely to authenticate you and allow you to access F.R.O.S.T. We do not sell, share, or transfer your personal data to any third party for any purpose.

Where your data is stored

Account data is stored on servers operated by Timberline Labs and our hosting providers. All servers are located in the United States.

Third-party services

• Google / GitHub OAuth — if you sign in with Google or GitHub, those providers authenticate you and share your basic profile with us. Their privacy policies govern that process.
• Email delivery — we use a third-party email service to send verification messages. Your email address is transmitted to them for delivery purposes only.
• Hosting providers — your data resides on infrastructure operated by our cloud hosting provider.

Your rights

You may request deletion of your account and all associated personal data at any time by emailing privacy@timberlinelabs.io. We will process deletion requests within 30 days.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of F.R.O.S.T. after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this policy: privacy@timberlinelabs.io