A little discovery. A little connection.
Your privacy.
Effective October 19, 2026. This policy covers Emberfloat’s website and iPhone app, operated by Framework & Forge.
Information we use
- Account information: your email, authentication ID, chosen username, and preferences. We use these to sign you in, keep your account separate, and operate the service.
- Content and activity: links, titles, notes, comments, reactions, saved links, sender follows, viewing history, notification read status, handoffs, and first/last visit timestamps. These support discovery, your collections, and account administration.
- Safety information: reports, blocks, moderation decisions, suspensions, and limits on repeated requests. Email and network-address values used for app rate limits are hashed before storage in those limit records.
- Approximate release location: when the preference is enabled, a new submission can record a city/region/country and coordinates rounded to one decimal place, estimated by Cloudflare from your network. This is enabled by default. We do not request GPS, and we do not store your IP address or street address with the Ember. VPNs and network routing can make the estimate inaccurate. Release locations are currently private to the service; there is no public journey map.
- Service providers can process network addresses, request metadata, authentication events, and email-delivery records to deliver and secure their services. Their infrastructure records are distinct from the data stored with an Ember.
What other people can see
Your username, sender profile, shared content and notes, send counts, and journey history can be visible to signed-in users. Journey links still require sign-in. Saved links, sender follows, viewing history, notification read status, safety reports, and thumbs-down reactions are private to your account in the app. Operators and authorized moderators can access information needed to administer accounts and review abuse.
Your device
We use secure authentication cookies. Drafts, unsent notes, scene settings, and some preferences can be stored on your device. Signing out clears account drafts on that browser. The iPhone Share Extension temporarily saves one shared URL in the app’s shared storage until it has been copied into your draft. It does not post for you or share your sign-in credentials.
Providers and media
Cloudflare hosts the app and its application database. Supabase provides authentication, and our email-delivery provider handles sign-in emails. Media previews, thumbnails and players can connect to YouTube, TikTok, Instagram, Spotify, SoundCloud, Apple Music, or Vimeo. Those providers can receive your network address and request details, and their own privacy policies apply. We do not control their cookies, regional restrictions, or data practices. We do not sell your personal data or insert our own advertising. Embedded providers may display advertising and process data under their own policies.
Your choices
Turn off approximate release location in Account → Preferences to stop new collection and remove previously saved release locations from the live app database. Export your account data or initiate permanent deletion under Preferences → Account data. Contact help@emberfloat.com for privacy questions or requests to access or correct information you cannot manage in the app.
Retention and deletion
We keep active account data while it is needed for the features described above. Viewing history remains until the related content or account is deleted. Transient app rate-limit and recent-exposure records are pruned as the service is used. Deleting your account removes your app content and its dependent journeys, profile, notes, saved items, preferences, reports, blocks and activity, and deletes your Emberfloat authentication identity.
If authentication cleanup fails temporarily, we retain only the identifiers and retry information needed to complete it, then remove that retry record. We retain an account ID and closure timestamp to block stale requests and reapply deletion after a restore. Hosting recovery copies can retain earlier data until their configured retention expires; deletion must be reapplied before restored data is reopened. Copies other people made, external media, and downloads already on your devices are outside the app’s deletion controls. Infrastructure and delivery logs follow each provider’s retention configuration.
Age and changes
Emberfloat is for people 13 and older. Do not create an account if you are under 13. Contact us if you believe an under-13 account exists so we can investigate and remove it. We may update this policy as features and providers change; this page will show the effective date.