Privacy Policy

When you create an account on Canonum, we collect:

• Email address — provided through Google sign-in via Firebase Authentication
• Username — chosen by you during account setup
• Profile info — optional bio and avatar image you choose to add
• Tier list content — the lists, items, and rankings you create

We also automatically collect:

• IP address — used solely for rate limiting and abuse prevention
• Page views — anonymous view counts on public tier lists

• To provide and operate the Canonum service
• To display your public tier lists and profile to other users
• To prevent abuse through rate limiting
• To send transactional communications if needed (e.g., account issues)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Canonum uses Firebase Authentication (provided by Google) for sign-in. When you sign in with Google, Firebase handles your credentials. We receive your email address and a unique identifier but never see or store your Google password.

For more information, see Firebase's Privacy Policy.

We use a small number of cookies required for the service to function:

• Session cookie — keeps you logged in
• Authentication token — verifies your identity with Firebase
• CSRF token — protects against cross-site request forgery

We do not use advertising cookies, analytics trackers, or third-party tracking pixels.

Your data is stored on servers hosted by Railway (railway.app) using PostgreSQL. Avatar images are stored on the application server. We take reasonable measures to protect your data but cannot guarantee absolute security.

You can:

• Edit your username, bio, and avatar from your account settings
• Delete your tier lists at any time
• Delete your account from your account settings — tier lists with no outside activity are permanently removed; those bookmarked or remixed by others are anonymized

Users under 13 should use Canonum with parental permission. If you are a parent and have concerns about your child's data, please contact us and we will address them promptly.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of Canonum after changes constitutes acceptance of the updated policy.

Questions about this policy? Reach out at hello@canonum.app.