Privacy Policy

Account data: If you register, we store your name, email address, and a hashed version of your password. We never store plaintext passwords.

Social sign-in: If you sign in with a social provider (via Supabase), we receive your name and email address. We do not store your social account password.

Uploaded files: Files you upload for comparison are processed in memory on our server. They are not written to permanent storage. Only the diff result is stored if you choose to save or share it.

Usage data: We may log standard server access logs (IP address, timestamp, HTTP method, response code) for security and debugging purposes.

We use the information we collect to:

• Authenticate you and maintain your session
• Associate saved diffs with your account
• Respond to support or contact requests
• Detect and prevent abuse or security incidents

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Saved and shared diffs are retained according to the expiry option you selected when saving: 1 day, 7 days, 30 days, or never. Diffs set to never expire remain accessible until you delete them manually from your dashboard.

Account data is retained until you delete your account. You can permanently delete your account and all associated diffs at any time from your Profile page. Deletion is immediate and irreversible.

Server access logs are retained for up to 90 days.

We use browser localStorage to store your authentication tokens and theme preference (functional cookies only).

In addition, our third-party advertising partner (Google AdSense) may set cookies on your device to serve personalized advertisements — see Section 5 for full details and opt-out options.

Google AdSense (Advertising): We use Google AdSense to display advertisements on this site. Google AdSense uses cookies — including the DoubleClick cookie — to serve ads based on your prior visits to this website or other websites on the internet. This allows Google and its partners to show you ads relevant to your interests.

You may opt out of personalized advertising at any time by visiting Google Ad Settings or aboutads.info. For more information on how Google uses data when you visit sites that use its advertising services, see How Google uses information from sites or apps that use our services.

Supabase Auth: Social authentication is handled via Supabase Auth. Please review Supabase's Privacy Policy.

We use HTTPS, JWT-based authentication with short-lived access tokens, HTTP security headers (via Helmet), and bcrypt password hashing to protect your data. Despite these measures, no system is 100% secure.

FreeDiffChecker is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the "last updated" date at the top. Continued use of FreeDiffChecker after changes constitutes acceptance of the updated policy.

For privacy-related questions or data deletion requests, email us at [email protected] or use our Contact Us page.