Privacy Policy
Last updated: March 9, 2026
1. Introduction
FeedMango ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, how we use it, and your rights regarding your data.
By using FeedMango, you agree to the collection and use of data as described in this policy.
2. Data We Collect
Account Data
When you sign in with Google, we receive and store your name, email address, and profile picture from your Google account. We also store a unique Google identifier to link your account.
User-Generated Content
Content you create on FeedMango — including posts, comments, and votes — is stored and associated with your account. Your name and avatar are visible to other users on boards you participate in.
Payment Data
When you subscribe to a paid plan, your payment is processed by Creem. We share your email address with Creem to facilitate the transaction. We do not store your credit card details — Creem handles all payment information directly. We store your subscription status, plan type, and billing period dates.
Usage Data
We use Vercel Analytics to collect anonymized usage data such as page views and web performance metrics. This data helps us improve the Service.
3. Cookies
We use the following cookies:
- session — Keeps you signed in. HTTP-only, expires after 30 days.
- oauth_state — Used during the Google sign-in flow. HTTP-only, expires after 10 minutes.
- oauth_code_verifier — Used during the Google sign-in flow for security (PKCE). HTTP-only, expires after 10 minutes.
We do not use third-party tracking cookies. All cookies are strictly functional.
4. How We Use Your Data
We use your data to:
- Provide and operate the Service
- Authenticate your identity and maintain your session
- Process payments and manage subscriptions
- Send transactional emails (welcome emails, new post notifications to admins)
- Improve the Service based on usage patterns
We do not sell your personal data. We do not send marketing emails.
5. Third-Party Services
We share data with the following third-party services as necessary to operate FeedMango:
- Google — Authentication provider. Receives OAuth requests during sign-in.
- Creem — Payment processor. Receives your email address for checkout and subscription management.
- Resend — Email delivery service. Receives recipient email addresses to send transactional emails.
- Vercel — Analytics provider. Receives anonymized usage and performance data.
- Railway — Infrastructure provider. Hosts our application and database.
6. Data Retention
We retain your account data for as long as your account exists. Sessions expire after 30 days. Brand invitations expire after 7 days.
If you delete a brand, all associated boards, posts, comments, and votes are permanently deleted.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw consent for data processing
To exercise any of these rights, contact us at hello@sidecrumbs.com.
8. Data Security
We take reasonable measures to protect your data. All connections use HTTPS. Cookies are HTTP-only and marked secure in production. Webhook signatures are verified using HMAC-SHA256.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
9. Children's Privacy
FeedMango is not intended for children under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.
11. Contact
If you have questions about this privacy policy or your data, contact us at hello@sidecrumbs.com.