Skip to main content

Privacy Policy

Last updated: September 2026

At Polystacks, we are dedicated to supporting the quantum computing open source ecosystem with privacy, transparency, and minimal data collection by default. This policy explains what information we collect, why we collect it, how it is stored, and your rights regarding your data.

1. Information We Collect

A. Account and Profile Data

When you register an account on Polystacks via email/password or third-party OAuth providers (GitHub or Google), we collect:

  • Authentication credentials: Email address and encrypted password hash (managed securely via Supabase Auth).
  • Public profile information: Username, display name, avatar URL, bio, location, and GitHub profile URL if you choose to provide them.
  • Personal preferences: Your saved project bookmarks.

B. Project Submissions and Inquiries

When you submit a new project through our contribution form or send a message via our contact form, we collect:

  • Submitted repository URLs and categorized metadata (framework, task types, tags).
  • Optional contact email address and notes accompanying the submission or message.

C. Newsletter Subscriptions

If you subscribe to the Polystacks monthly digest, we store your email address and subscription timestamp. You can unsubscribe at any time using the link in any newsletter issue or by visiting our unsubscribe page.

D. Public Open Source Metadata

The software projects, repositories, benchmarks, and research papers listed on Polystacks are sourced from publicly accessible GitHub repositories and academic archives (such as arXiv). We do not collect private code, private repository data, or personal details beyond what maintainers publish publicly.

E. Anonymous Analytics

We use Vercel Analytics to monitor aggregate site health and performance. This service is cookieless and privacy-friendly:

  • Pages visited and duration
  • Referring websites and search queries
  • Device type, operating system, and browser engine
  • Country-level geographic region (IP addresses are discarded immediately and never stored)

2. Cookies and Local Storage

We do not use advertising or tracking cookies. We only use minimal cookies and local browser storage necessary for application functionality:

  • Authentication session cookies: Standard HTTP-only cookies (sb-*-auth-token) set by Supabase Auth to keep you securely signed in.
  • Local storage: Stores your chosen UI color mode (theme: light/dark) and client-side recent search queries. These never leave your device.

3. Third-Party Service Providers

We partner with select infrastructure providers to operate the platform reliably:

  • Supabase: Database hosting, user authentication, and row-level access control. Data is encrypted in transit (TLS 1.3) and at rest.
  • Vercel: Edge network hosting, serverless compute, and privacy-preserving analytics.
  • GitHub & Google: Optional OAuth identity providers for account authentication.
  • Resend / Email Services: Transactional authentication notifications (confirmation, password reset) and monthly digest delivery.

4. Data Retention and Security

User profiles, bookmarks, and submission records are retained for as long as your account remains active. If you delete your account or request removal, your personal profile data and bookmarks are permanently deleted.

We employ strict security practices including Postgres Row Level Security (RLS), HTTPS encryption everywhere, constant-time secret verification, and rate limiting to prevent unauthorized data access or credential brute-forcing.

5. Your Rights (GDPR & CCPA)

Regardless of your jurisdiction, you have the right to:

  • Access and portability: Request a copy of all personal information we hold about you.
  • Rectification: Edit or correct your profile information at any time in your profile settings.
  • Deletion: Request complete deletion of your account and associated personal data.
  • Opt-out: Unsubscribe from marketing or newsletter communications with a single click.

6. Contact and Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: