Privacy Policy

Resources is a human-curated link-sharing platform. The service is operated by the company being incorporated in the Principality of Andorra to run Resources. This notice will be updated with the registered entity name, registration number, and seat once incorporation completes.

For any privacy question, or to exercise a right described below, contact us at contact@myresources.app.

We keep collection to what the product needs to work.

• Account data. Your email address and a securely hashed password (handled by our authentication provider), your public pseudo, and optional profile details such as a bio and avatar. If you enable two-factor authentication, we store the encrypted TOTP secret and your recovery codes.
• Content you create. The boards, lists, and resources (URLs and their metadata: title, description, image, favicon, domain) you save, plus the profiles, boards, and lists you follow.
• Aggregate usage. A per-resource view count, visible only to the creator who owns it. We do not build a public activity feed and we do not track what you read across the web.
• Product analytics. Privacy-friendly, cookieless analytics on the public pages (page views and referrers in aggregate). No personal profiles, no cross-site tracking.

The Resources Save extension exists for a single purpose: to save the page you are looking at into one of your boards. It is designed to read as little as possible.

• It reads a page only when you act. The extension does not run in the background on the sites you visit. It reads the current tab only when you open the popup or trigger a save, using the activeTab permission. There is no passive content script and no browsing-history collection.
• What it reads from that page. The title, description, a representative image, the favicon, the canonical URL, the domain, and a short text excerpt (up to roughly 2,000 characters) plus your current text selection, if any. This is the same information used to build the resource card.
• Where it goes. That data is sent over HTTPS to our backend to create the resource on your account. It is tied to your Resources session, which is shared with the extension from the web app when you connect it.
• Local storage. The extension uses browser storage only to hold your session and a short queue of pending saves. Nothing is sold, and nothing is shared with advertisers.

When you save a page, we use an AI model to suggest a category, a content type, an estimated reading time, and the most relevant board and list. To do this, the page metadata (URL, title, description, domain, and the short excerpt or selection) is sent to our AI provider, Anthropic, for processing.

This data is processed to return a suggestion and is not used to train their models. We send only the metadata needed for the suggestion, not your account credentials.

• To run the core service: store your boards, render public pages, and let visitors follow what you curate.
• To authenticate you and keep your account secure, including two-factor authentication.
• To classify and enrich the resources you save, as described above.
• To send transactional emails you would expect, such as a board invitation or a security alert.
• To understand, in aggregate, how the public pages are used so we can improve them.

We do not sell your personal data, and we do not show advertising.

We rely on a small number of providers to operate the service. Each processes data only on our instructions.

• Supabase hosts our database, authentication, and file storage. Data is stored in the European Union (Ireland region).
• Vercel hosts the application and provides the cookieless analytics on public pages.
• Anthropic processes saved-page metadata to return the classification suggestions described above.
• Resend delivers transactional emails such as board invitations.

Your account and content are stored in the European Union. Some providers may process limited data outside the EU under appropriate safeguards, such as the European Commission standard contractual clauses. Andorra, where the operating company is being established, benefits from a European Commission adequacy decision.

We keep your account and content for as long as your account is active. When you delete a resource, board, or your account, the associated data is removed from our live systems, with short-lived copies persisting in backups before they expire. Transactional email logs and aggregate analytics are retained for a limited period.

Because Resources serves visitors in the European Economic Area, the GDPR applies, alongside Andorran data protection law (Llei 29/2021). You have the right to access, correct, delete, export, and restrict the processing of your personal data, and to object to certain processing.

To exercise any of these, email contact@myresources.app. You also have the right to lodge a complaint with a supervisory authority: the Andorran Data Protection Agency (APDA), or your local authority in the EEA.

Access to your data is enforced at the database level by row-level security, so a user can only reach the boards and resources they own or have been invited to. Traffic is encrypted in transit, and we offer two-factor authentication on every account.

We use only the essential cookies required to keep you signed in. Our public-page analytics are cookieless and do not track you across sites. We do not use advertising or third-party tracking cookies.

Resources is not directed to children under 16. We do not knowingly collect personal data from anyone under 16.

We may update this notice as the product evolves or as the operating company completes its incorporation. When we make a material change, we will revise the date above and, where appropriate, notify you.