Privacy Policy

This covers your Culebra account and every product it opens: Connect, Codex, Command, the Exchange, Cerebro Culebra, and Citadel Culebra.

What we collect

• Account: your name, email, and a hashed password. We never store your password itself.
• Age check: at signup we ask your date of birth to confirm eligibility. We check it and discard it — the date is not stored.
• What you create: posts, comments, messages, photos, and your collection records.
• Technical: IP address and basic request data, used for security and rate limiting.
• Payments: handled by Stripe. Card numbers never touch our servers; we keep a record of what you bought.

What we do with it

Run the products, keep your account secure, stop spam and abuse, answer support requests, and send you the mail you asked for. That's the whole list.

What we don't do

• We don't sell your personal information.
• We don't use your private collection records — your animals, weights, feedings, health logs — for advertising, and we don't train models on them.
• We don't share your email with other keepers.

Who else touches your data

Only the services needed to run this: Neon (database), Vercel (hosting), Stripe (payments), and Resend (email). Each gets only what its job needs. We'll also disclose data if the law genuinely requires it, or to protect someone from harm.

Who can see what

Your collection is private to you and anyone you explicitly add to it. What you post to a public Connect feed or a space is visible to that audience. Direct messages are visible to the people in the thread. Your profile page is public unless you set it to private.

Your choices

• Edit or delete your content whenever you like.
• Ask for a copy of your data, or ask us to delete your account — write to the address below and we'll do it within 30 days.
• Block anyone. A block hides you from each other and stops messages in both directions.
• Unsubscribe from any non-essential email from the email itself.

Depending on where you live you may have additional rights under laws like the CCPA or GDPR — including access, correction, deletion, and portability. Ask and we'll honor them; we don't make you prove you're in the right jurisdiction first.

Children

Culebra is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, tell us and we'll remove it.

Security

Traffic is encrypted in transit and data is encrypted at rest. Passwords are hashed. Access to one keeper's records is enforced both in the application and by the database itself. You can sign out every device from your account security page if you think a session was compromised.

No system is perfect. If we ever have a breach affecting your data, we will tell you.

Retention

We keep your data while your account is open. After you delete it, content is removed and anything we must keep for legal or accounting reasons is anonymized.

Changes

We'll update this as the products change, and give notice before material changes take effect.

See also our Terms of Service.