Privacy Policy

• Account data — your email address (always), and, if you sign in with Google, your name and profile picture as provided by Google. We do not receive or store your Google password.
• Memory data — the worlds you save (♡) and the worlds you mark as lived-in, tied to your account.
• Creator content — if you become a creator, the handle, display name and bio you enter, plus the tours you build: titles, descriptions, real-place locations, map coordinates and the photos you upload.
• Technical data — aggregate, non-identifying analytics (page views, outbound clicks) collected without cookies, and the session cookie that keeps you signed in.

• To authenticate you and keep you signed in (magic link or Google).
• To provide the account and memory features — saving worlds and remembering the ones you've lived in.
• To let creators build, preview, submit and publish tours, and to moderate that content.
• To understand, in aggregate, how the product is used, so we can improve it.

We process your data on the basis of your consent (given when you sign in and submit content), and to perform the service you ask us for. You may withdraw consent at any time by deleting your account or writing to us; withdrawal does not affect processing already carried out.

We use a strictly necessary cookie to maintain your sign-in session. Analytics is provided by Plausible, a privacy-friendly tool that does not use cookies and does not build cross-site profiles of you. We do not run advertising or tracking cookies.

We do not sell your personal data. We use a small set of processors to run the service: Supabase (database and file storage for accounts, memory and creator content), Google (OAuth sign-in), Vercel (application hosting) and Plausible (cookieless analytics). These providers may store data on servers outside your country, including outside the Russian Federation; by using Hazemere you consent to such cross-border transfer. We also disclose data where required by law.

We keep account and memory data while your account exists. Published creator content stays available while published. When you delete your account, or ask us to delete your data, we remove it within a reasonable period, except where the law requires us to keep certain records.

You can ask us to access, correct, export or delete your personal data, restrict or object to its processing, and withdraw consent. To exercise any of these, write to the operator at the address below. You also have the right to complain to your local data-protection authority (in Russia, Roskomnadzor).

Access to personal data is protected by authentication and database row-level security, so each user can reach only their own records. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

Hazemere is not directed to children under 16 (or the minimum age of digital consent in your country). If you believe a child has given us personal data, contact us and we will delete it.

We may update this Policy as the product evolves (for example, when payments are introduced). We will change the date at the top and, for material changes, give notice in the app.