Privacy Policy

Last Updated: May 1, 2026

1. Introduction

At Mantl, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform. We operate on a "privacy-by-design" principle, minimizing data collection where possible.

2. Information We Collect

  • Account Information: When you sign up, we collect your email address, username, and password (via Supabase Auth).
  • User Generated Content: We store the images, descriptions, and metadata of the items in your collection that you choose to upload.
  • Payment Data: Payment processing is handled by Stripe. We do not store your credit card numbers on our servers. Stripe provides us with transaction confirmation and basic billing details.
  • Usage Data: We use PostHog to collect anonymous telemetry data to improve platform performance. This includes page views, interaction speeds, and error logs.

3. How We Use Your Data

We use the information we collect to:

  • Provide and maintain the Mantl Service.
  • Process your subscription payments and entitlements.
  • Optimize platform performance (Perceived Speed Engine).
  • Enforce our safety policies and terms.
  • Communicate with you about updates or support requests.

4. Local-First Data Handling

To ensure 0ms latency, Mantl caches much of your data locally in your browser's IndexedDB. This data remains on your device and is only synced to our servers (Supabase) for backup and cross-device availability.

5. AI Moderation & Safety

We use client-side AI (NSFWJS) to analyze images before they are uploaded. This analysis happens on your device; images are only sent to our storage if they pass these safety checks. This reduces the exposure of private or sensitive data to our servers.

6. Data Sharing & Third Parties

We do not sell your personal data. We share data only with service providers necessary to operate the platform:

  • Supabase: Database and Authentication.
  • Stripe: Payment Processing.
  • Cloudflare: Edge Runtime and Content Delivery.
  • PostHog: Analytics and Telemetry.

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have rights regarding your personal data, including:

  • The right to access the data we hold about you.
  • The right to request deletion of your data.
  • The right to correct inaccurate information.
  • The right to object to or restrict processing.

To exercise these rights, please contact us at privacy@mantl.link.

8. Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@mantl.link.