Our Privacy Philosophy

Model Horse Hub was built by collectors, for collectors. We believe your collection data, financial information, and personal details belong to you — not us, not advertisers, and not “partner companies.” We designed every layer of this platform with privacy as a core architectural principle, not an afterthought.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a displayalias (username) of your choosing. We do not require your real name, mailing address, phone number, or any government ID.

Collection Data

Information you voluntarily enter about your model horses, including custom names, condition grades, finish types, photos, and reference links to our catalog database. This data is stored under your account and protected by row-level security.

Financial Vault Data

Purchase prices, estimated values, insurance notes, and purchase dates you optionally provide. This data is encrypted at rest and accessible only to you. Our team cannot view your financial vault — it is protected by cryptographic row-level security policies that enforce access at the database level.

Photos

Images you upload are stored in secure cloud storage with signed URL access controls. Photos are only accessible via time-limited signed URLs — they cannot be hotlinked or scraped by third parties.

Usage Data

We use Google Analytics to understand aggregate usage patterns (page views, feature adoption). This data is anonymized and never linked to your collection or financial information.

2. How We Use Your Information

We use your information exclusively to:

• Provide and operate the Model Horse Hub platform
• Display your public collection in the Show Ring (only when you opt in)
• Facilitate messaging and commerce features between users
• Send transactional emails (e.g., message notifications, transfer confirmations)
• Generate Hoofprint™ provenance records for your horses
• Improve the platform based on aggregate usage patterns

We do NOT:

• Sell your data to third parties — ever
• Display ads or share data with advertisers
• Use your collection data for machine learning training
• Share your financial vault data with anyone, including our own staff
• Send marketing emails without your explicit consent

3. Data Security

Your data is protected by multiple layers of security:

• Row-Level Security (RLS) — enforced at the PostgreSQL database level, meaning even if our application code had a bug, the database itself would refuse to return another user's data
• Encrypted connections — all data in transit is encrypted via TLS/HTTPS
• Signed URLs for photos — image access requires time-limited cryptographic tokens
• Secure authentication — powered by Supabase Auth with PKCE flow and HTTP-only session cookies
• Rate limiting — sensitive actions are protected against abuse and brute-force attacks

4. When We Share Data

We share data only in the following limited circumstances:

• Public profiles — if you choose to make horses public, their name, photos, reference link, condition, and finish type are visible in the Show Ring. Financial data is never shown publicly.
• Hoofprint™ transfers — when you transfer a horse to another user, provenance records (ownership dates, show results) transfer with the horse. Financial vault data is never transferred.
• Commerce — when you engage in a Safe-Trade transaction, the other party can see the horse listing details you've published. No private data is shared.
• Legal requirements — if required by law, subpoena, or court order. We will notify you unless legally prohibited from doing so.

5. Third-Party Services

We use the following third-party services:

• Supabase — database hosting, authentication, and file storage (hosted in the US)
• Vercel — application hosting and edge delivery
• Resend — transactional email delivery
• Google Analytics — anonymized usage analytics
• Google Gemini — optional AI mold identification (images are processed but not stored by Google)

We do not use any advertising networks, social media trackers, or data brokers.

6. Your Rights

You have the right to:

• Export your data — download your entire collection as CSV at any time from your dashboard
• Delete your account — request full account deletion from your Settings page, which removes all your data including photos
• Control visibility — set any horse to private, unlisted, or public at any time
• Opt out of analytics — use any standard ad-blocker or Do Not Track setting

7. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party marketing pixels. The only non-essential cookie is from Google Analytics, which respects Do Not Track headers.

8. Children's Privacy

Model Horse Hub is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, pleasecontact us and we will promptly delete the account.

🤖 AI, Data Collection, and Copyright Policy

We believe your data and your art belong to you. Because there is a lot of confusion regarding how modern websites are built, we want to be fully transparent about our technology and data practices:

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email. The “Last updated” date at the top of this page reflects the most recent revision.

10. Questions?

If you have questions about this Privacy Policy or how your data is handled, please reach out via our Contact page.