ilhame

Privacy Policy

Last updated: December 13, 2025

Introduction

Welcome to ilhame.id. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our website and services.

Scope of This Policy

This privacy policy applies to all services provided by ilhame.id, including all subdomains and related applications. By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We collect the following personal information:

  • Name: Your full name or display name
  • Email Address: Used for account creation and communication
  • Profile Photo: Optional profile image from your authentication provider
  • User-Generated Content: Blog posts, comments, gallery images, and other content you create

Authentication Data (Email & Google OAuth)

When you sign in using Google OAuth, we receive:

  • Your Google account email address
  • Your Google profile name
  • Your Google profile picture (if available)
  • A unique identifier from Google to authenticate your account

We use Supabase Auth to securely handle this process. We do not receive or store your Google password.

Technical Information

  • IP Address: For security and analytics purposes
  • Browser Type and Version: To optimize user experience
  • Device Information: Operating system, device type, and screen resolution
  • Usage Data: Pages visited, time spent, and interaction patterns
  • Cookies: Session cookies for authentication and preference storage

How We Use Your Information

We use the collected information for the following purposes:

  • Account Management: Create and manage your user account, authenticate your identity
  • Service Delivery: Provide and maintain our services, display your content
  • Personalization: Remember your preferences and customize your experience
  • Communication: Respond to inquiries, provide support, and send important updates
  • Analytics: Understand usage patterns to improve features and performance
  • Security: Detect and prevent fraud, abuse, and security threats
  • Legal Compliance: Comply with legal obligations and enforce our terms of service

Data Sharing & Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

  • With Your Consent: When you explicitly agree to share information
  • Service Providers: With trusted third-party services (e.g., hosting, authentication) that help us operate our platform
  • Legal Requirements: When required by law, court order, or legal process
  • Protection of Rights: To protect the rights, property, or safety of ilhame.id, our users, or others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Storage & Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit using HTTPS/TLS and at rest in our databases
  • Secure Authentication: Supabase Auth with email/password and OAuth 2.0 for secure sign-in
  • Database Security: PostgreSQL database with strict access controls and regular security audits
  • Access Controls: Role-based access with principle of least privilege
  • Regular Backups: Automated backups to prevent data loss
  • Monitoring: Continuous monitoring for suspicious activity and security threats
  • Updates: Regular security patches and dependency updates

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable measures.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. Specifically:

  • Account Data: Retained while your account is active
  • Content: Blog posts, comments, and gallery items remain until you delete them
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely
  • Legal Requirements: Some data may be retained longer to comply with legal obligations

When you delete your account, we will remove your personal information from our active databases, though some data may remain in backups for a limited period.

Your Rights

You have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. You can view most of your data through your account dashboard.

Right to Update

You can update your profile information, including your name and profile photo, at any time through your account settings.

Right to Deletion

You have the right to request deletion of your personal data. You can delete your account and associated data through the dashboard or by contacting us. Please note that some information may be retained for legal or legitimate business purposes.

Additional Rights

  • Right to data portability (receive your data in a structured format)
  • Right to object to processing of your personal data
  • Right to restrict processing in certain circumstances
  • Right to withdraw consent at any time

To exercise these rights, please contact us through the information provided below.

Third-Party Services

We use the following third-party services:

These services may collect and process data according to their own privacy policies. We recommend reviewing their policies to understand how they handle your information.

Children's Privacy

Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child under 13, we will take steps to delete that information as soon as possible.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date at the top of this policy
  • Sending an email notification for significant changes (if you have an account)

We encourage you to review this privacy policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

We will respond to your inquiries within a reasonable timeframe, typically within 30 days.