Privacy Policy

Frontend Forever ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, your rights, and how to contact us with any concerns.

1. Information We Collect

We collect the following types of information:

• Account data: Email address, username, display name, and profile photo when you register or sign in via Google or GitHub (through Firebase Authentication).
• Content data: UI elements (HTML, CSS, React code), blog posts, comments, and collections you create or submit.
• Usage data: Pages visited, elements viewed, interactions (likes, follows), and timestamps.
• Technical data: IP address, browser type, device information, and error logs collected automatically for security and performance monitoring.
• Communications: If you contact us via feedback forms, we store the content of your message and your email address.

2. How We Use Your Information

• To provide, operate, and improve the Frontend Forever platform.
• To authenticate your identity and secure your account.
• To send transactional emails (email verification, password resets, newsletter if opted in).
• To display your public profile, elements, and contributions to other users.
• To enforce our Terms of Service and Community Guidelines.
• To analyse usage trends and fix bugs.

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following third-party processors:

• Firebase (Google LLC): Authentication via Google and GitHub OAuth, and user identity management. Firebase may collect and process data according to Google's Privacy Policy.
• Redis / Upstash: Rate limiting and session data stored temporarily in memory.
• Email service provider: Used to send transactional emails on our behalf.

4. Cookies and Local Storage

We use HttpOnly cookies to store authentication tokens securely, a theme preference cookie, and session data. We do not use third-party advertising or tracking cookies. See our Cookie Policy for full details.

5. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law or for fraud prevention. Publicly submitted content (UI elements) may be retained in anonymised form after account deletion.

6. Your Rights

Depending on your jurisdiction (including GDPR for EU/EEA residents and CCPA for California residents), you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing of your data.
• Data portability — receive a copy of your data in a machine-readable format.
• Withdraw consent at any time for processing based on consent.
• Opt-out of sale — we do not sell personal data, but you may submit a request to confirm this.

To exercise any of these rights, please contact us at privacy@frontendforever.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures including HTTPS, HttpOnly authentication cookies, bcrypt password hashing, rate limiting, and Content Security Policy headers. However, no system is completely secure and we cannot guarantee the absolute security of your data.

8. Children's Privacy

Frontend Forever is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact / Data Protection Officer

For privacy-related enquiries, data access requests, or to exercise your rights, email us at privacy@frontendforever.com or use the Feedback page with the subject "Privacy Request". For GDPR-related enquiries, you may also contact your local data protection supervisory authority.