Privacy Policy

1. Introduction

The Breakfast List ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account: Email address, name (optional), and password (encrypted)
• Submit content: URLs, titles, and descriptions of content you submit to Charts
• Vote on content: Your voting activity on community submissions
• Contact us: Any information you provide when contacting support

2.2 Automatically Collected Information

When you access the Service, we automatically collect:

• IP Address: Used for voting fraud prevention and security
• Browser and device information: Browser type, operating system, device identifiers
• Usage data: Pages viewed, time spent on pages, navigation patterns
• Timestamps: When you submit content, vote, or perform actions

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how you use the Service. You can control cookies through your browser settings, but disabling cookies may limit some functionality.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process your content submissions and votes
• Prevent voting fraud and abuse (IP-based vote tracking)
• Send account-related emails (verification, password resets)
• Analyze usage patterns to improve the Service
• Detect and prevent security incidents and technical issues
• Comply with legal obligations

4. How We Share Your Information

4.1 Public Information

The following information is publicly visible:

• Content submissions (URLs, titles, descriptions, thumbnails)
• Vote counts on submissions
• Your username (if you choose to display it)

4.2 Service Providers

We share information with third-party service providers who help us operate the Service:

• Supabase: Database hosting and authentication services
• Resend: Email delivery for account verification and password resets
• Vercel (or hosting provider): Application hosting and infrastructure

These providers are contractually obligated to protect your data and may only use it to provide services to us.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. IP Address Collection and Voting

We collect and store IP addresses specifically to:

• Prevent duplicate voting on the same submission
• Detect and prevent voting manipulation and fraud
• Ensure one vote per person per submission per day
• Maintain the integrity of our community Charts system

IP addresses are stored securely and are not publicly displayed. They are retained for as long as necessary to maintain voting integrity and comply with legal requirements.

6. Data Retention

We retain your information for different periods depending on the type:

• Account data: Retained until you delete your account
• Content submissions: Retained as part of our historical archives
• Voting records: Retained for fraud prevention and analysis
• IP addresses: Retained for security and fraud prevention purposes
• Email communications: Retained as necessary for customer support

When data is no longer needed, we securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Passwords are encrypted using bcrypt hashing
• HTTPS encryption for all data in transit
• Secure database hosting with Supabase
• Regular security updates and monitoring
• Limited employee access to personal data

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Withdrawal of consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at privacy@thebreakfastlist.com. We will respond to your request within 30 days.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

10. Third-Party Websites

The Service contains links to third-party websites (YouTube, Spotify, TikTok, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies only to The Breakfast List.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at privacy@thebreakfastlist.com with "CCPA Request" in the subject line.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: consent, contractual necessity, legal obligations, and legitimate interests in operating the Service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

15. Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals websites you visit that you do not want your online activity tracked. We currently do not respond to Do Not Track signals. We track user activity as described in this Privacy Policy regardless of Do Not Track settings.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

The Breakfast List
A service of JNMG Ventures LLC

Email: privacy@thebreakfastlist.com

We will respond to all legitimate requests within 30 days.