Privacy Policy

Last Updated: January 25, 2026

At Shard ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use VisualSorting ("Service").

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account: Email address, display name, password (encrypted)
• Use OAuth providers: Name, email, profile picture from Google, GitHub, or Microsoft
• Share algorithms: Custom code, algorithm configurations, shared links
• Contact us: Any information you provide in communications

1.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage data: Features used, time spent, interactions
• Device information: Browser type, operating system, device type
• Log data: IP address, access times, pages viewed
• Cookies: Session tokens, preferences, authentication state

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and manage accounts
• Improve, personalize, and expand the Service
• Understand and analyze how you use the Service
• Develop new features and functionality
• Communicate with you about updates, security alerts, and support
• Send promotional communications (with your consent)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

We share information when you explicitly give us permission, such as when you share algorithms publicly.

3.2 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Hosting: Netlify (cloud hosting and CDN)
• Database: Neon (PostgreSQL database)
• Authentication: Google, GitHub, Microsoft (OAuth providers)

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Complying with court orders or subpoenas
• Protecting our rights, property, or safety
• Preventing fraud or abuse
• Responding to government requests

3.4 Business Transfers

If Shard is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Encryption: Passwords are hashed using Argon2id (winner of the Password Hashing Competition)
• HTTPS: All data transmitted is encrypted in transit
• Secure storage: Data is stored in secure, encrypted databases
• Access controls: Limited access to personal information

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may delete your account at any time through the Settings page. Upon deletion, we will permanently remove your personal information and shared algorithms within 30 days.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information at any time through the Settings page.

6.2 Delete Account

You have the right to delete your account and all associated data. This action is permanent and cannot be undone.

6.3 Opt-Out of Communications

You can opt out of promotional emails by following the unsubscribe link in any email we send.

6.4 Cookie & Analytics Management

When you first visit our Service, you will see a consent banner where you can:

• Accept All: Enable all cookies and analytics
• Decline All: Disable non-essential cookies and analytics (essential cookies for authentication remain)
• Customize: Choose which types of data collection to enable

You can change your preferences at any time via the Settings page or by clicking the cookie icon in the footer.

6.5 Data Portability

You can export your shared algorithms at any time.

7. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete it.

8. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using the Service, you consent to such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

13. Contact Us

For questions about this Privacy Policy, please contact us at: legal@vck.app