Our Privacy Philosophy

Model Horse Hub was built by collectors, for collectors. We believe your collection data, financial information, and personal details belong to you — not us, not advertisers, and not “partner companies.” We designed every layer of this platform with privacy as a core architectural principle, not an afterthought.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a displayalias (username) of your choosing. We do not require your real name, mailing address, phone number, or any government ID.

Collection Data

Information you voluntarily enter about your model horses, including custom names, condition grades, finish types, photos, and reference links to our catalog database. This data is stored under your account and protected by row-level security.

Financial Vault Data

Purchase prices, estimated values, insurance notes, and purchase dates you optionally provide. Vault data is never shown to any other user, never transferred with a horse, and never sent to third parties. Access is enforced by row-level security at the database level; the only automated reads are features you invoke yourself (your insurance report and your monthly collection digest, both computed on our own servers). Like all our data, it is encrypted at rest and in transit by our hosting infrastructure.

Photos

Images you upload are stored in secure cloud storage. Photos of public horses are served from stable public URLs so they load fast and can be shared; photos ofprivate horses are never linked or listed anywhere on the site, and their storage addresses are long random identifiers that cannot be guessed or browsed. Uploads are limited to image files with a size cap enforced at the storage layer.

Usage Data

We use Google Analytics to understand aggregate usage patterns (page views, feature adoption). This data is anonymized and never linked to your collection or financial information.

View Counts

We count views of things, not of people. When you open a horse passport, a show, a barn, a studio, a reference page or a profile, we add one to that item’s tally for the day — and that daily tally is all we keep. To avoid counting the same person twice in a day, we hold a one-way hash of your account (or, if you are signed out, of your network address and browser) for the rest of that day only; the hash is scrambled with a secret that changes every day, and our nightly cleanup deletes it. Once that runs, nothing in our systems could reconstruct what any particular person looked at, because the only record left is a number attached to the item. Owners can see the view count on their own horses; nobody else can, and we never publish view counts publicly.

2. How We Use Your Information

We use your information exclusively to:

• Provide and operate the Model Horse Hub platform
• Display your public collection in the Show Ring (only when you opt in)
• Facilitate messaging and commerce features between users
• Send transactional emails (e.g., message notifications, show results, entry deadline reminders)
• Generate Hoofprint provenance records for your horses
• Improve the platform based on aggregate usage patterns

We do NOT:

• Sell your data to third parties — ever
• Display ads or share data with advertisers
• Use your collection data for machine learning training
• Show your financial vault data to any other user, or share it with any third party
• Send marketing emails without your explicit consent

3. Data Security

Your data is protected by multiple layers of security:

• Row-Level Security (RLS) — enforced at the PostgreSQL database level, meaning even if our application code had a bug, the database itself would refuse to return another user's data
• Encrypted connections — all data in transit is encrypted via TLS/HTTPS
• Storage upload limits — image-only uploads with size caps enforced at the storage layer, and unguessable storage addresses for every photo
• Secure authentication — powered by Supabase Auth with the PKCE flow
• Rate limiting — sensitive actions are protected against abuse and brute-force attacks

4. When We Share Data

We share data only in the following limited circumstances:

• Public profiles — if you choose to make horses public, their name, photos, reference link, condition, and finish type are visible in the Show Ring. Financial data is never shown publicly.
• Hoofprint transfers — when you transfer a horse to another user, provenance records (ownership dates, show results) transfer with the horse. Financial vault data is never transferred.
• Commerce — when you engage in a Safe-Trade transaction, the other party can see the horse listing details you've published. No private data is shared.
• Legal requirements — if required by law, subpoena, or court order. We will notify you unless legally prohibited from doing so.

5. Third-Party Services

We use the following third-party services:

• Supabase — database hosting, authentication, and file storage (hosted in the US)
• Vercel — application hosting and edge delivery
• Resend — transactional email delivery
• Google Analytics — anonymized usage analytics (you can decline this in the cookie banner)
• Stripe — payment processing for optional paid tiers. Card details go directly to Stripe; we never see or store them
• Sentry — error monitoring, so we find crashes before you have to report them (error reports may include browser and page context, never vault data)
• eBay Partner Network — some catalog pages include clearly marked sponsored eBay search links; if you buy through one, we may earn a small commission. No data about you is shared with eBay

We do not use any advertising networks, social media trackers, or data brokers.

6. Your Rights

You have the right to:

• Export your data — download your entire collection as CSV at any time from your Settings page
• Delete your account — from your Settings page. Deletion anonymizes your account (your alias, bio, avatar, and message contents are removed or scrubbed) and permanently locks it. Records that other collectors rely on — provenance chains and show results attached to horses — are retained in anonymized form, because they are part of other people's horses' histories too. To request removal of specific content beyond this, contact us
• Control visibility — make any horse public or private at any time
• Opt out of analytics — choose “Decline Analytics” in the cookie banner; your choice is remembered and enforced on every visit

7. Cookies

We use only essential cookies required for authentication and session management, plus Google Analytics for anonymized usage statistics. We do not use tracking cookies, advertising cookies, or third-party marketing pixels. You can decline analytics via the cookie banner — declining is remembered and disables Google Analytics on every subsequent visit.

8. Children's Privacy

Model Horse Hub is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, pleasecontact us and we will promptly delete the account.

🤖 AI, Data Collection, and Copyright Policy

We believe your data and your art belong to you. Because there is a lot of confusion regarding how modern websites are built, we want to be fully transparent about our technology and data practices:

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the site, and the “Last updated” date at the top of this page always reflects the most recent revision.

10. Questions?

If you have questions about this Privacy Policy or how your data is handled, please reach out via our Contact page.