Privacy Policy

This page explains how ClnSlte handles information in this product. It does not claim certification under a particular privacy law.

Information we store

Account information includes your email, display name, a salted password hash, policy acceptance and account timestamps. We do not store your plaintext password. We store private design projects and item images you save to your account, personal hidden-item preferences, and the public listings, forum content, contractor ratings/reviews, work photos, likes and replies you choose to submit. Price-change requests retain their proposed price, source URL, note and owner decision.

We also store session records, security-rate-limit metadata, moderation reports, and private support requests. To protect access, authenticated requests update the last seen IP address. Administrators may record an account-ban reason and a separate IP restriction; each can be reversed without deleting content. Password reset links use a stored token hash, expire after 60 minutes and can be used once. Resetting a password ends all existing sessions. Reset delivery records keep only delivery status and operational metadata; the email service processes the recipient and reset link to deliver it. Hosting providers may process request and operational logs needed to deliver and protect the service.

Private and public information

Project boards are private by default. Each board has a Public on profile toggle; enabling it submits an explicit snapshot for content checks. Only approved, enabled snapshots are public. Later private edits are not published until you choose Publish latest saved snapshot. Turning the toggle off hides the snapshot and its photos. Your projects are accessed through your signed-in account, not through a publicly editable workspace link. Public item contributions, forum posts, display names and their timestamps are visible to other visitors. Your account email and private projects are not included in public library or forum responses. Do not put private addresses or personal information into public contributions.

Earlier workspace keys can be claimed once into an account. Legacy workspace archives remain available for that migration; account claims do not publish their contents. Contact the team through a private support request if an earlier archive needs attention.

How the service uses data

ClnSlte uses this information to provide accounts, save and export designs, show shared materials, run discussions, remember your hidden items, protect access and moderate public content. Data is hosted using Netlify and its managed database/storage services. No advertising trackers or third-party analytics are included in this release, and the product does not sell your information.

Cookies and your browser

An essential, httpOnly session cookie keeps you signed in. It is marked Secure on HTTPS and expires after up to 14 days unless you sign out sooner. Browser storage keeps local project copies and save metadata scoped to your account; the sign-out action clears those private local copies. A browser-only guest draft can remain in that browser. Downloaded files are under your control.

Images and content checks

File uploads and pasted images are optimized in your browser. When you request a web image, the image importer fetches the public URL through the service. Public contribution images are public; project-only imported images remain in your private project data. Listed supplier links take you to the supplier’s website under its policies.

Before publication, public listing submissions, forum and contractor posts/replies, their photos, contractor ratings/reviews, price-request text and reported content are sent to the Gemini API for content checks. The request includes the submitted content, not your account email, password, session or private design boards. Gemini is an external service operated by Google and processes requests under its applicable service terms. Do not submit private personal information in public content or photos.

When a check is uncertain, flags content or cannot complete, the submission is retained for human owner review and hidden from the public. Authors see an under-review status for held or denied content. Internal moderation notes are available only to administrators. Price-change requests show their decision status. We store moderation decisions and an audit trail. Owner alerts are recorded in the signed-in admin inbox. This release does not send owner notification emails.

Private project photos are not sent to Helper AI. Publishing a public board snapshot sends its submitted text and photos for content checks; asking Helper AI sends only the minimized text/financial context described below, not the full private workspace. Profile bios/photos, directory submissions, item reviews and all photos in public board snapshots are checked before publication. Helper AI sends the question and a minimized project context (rooms, material names/unit prices, budget and totals) to Gemini. Account identifiers, email, product links, notes and photos are excluded. Model estimates are labelled and cached; unavailable checks fall back to offline summaries.

Profiles, points and member lookup

Public profiles can show your display name, approved picture and bio, joined date, points, verified member badge, approved public boards and public activity. Your email is never included in public profiles or search results. Signed-in members may search by part of a display name or an exact account email. Email prefix searches are not supported; security limits apply by session and IP. We store a server-side points ledger and administrator adjustments. A community badge reflects participation or an owner decision, not identity or professional verification.

Your choices

You can edit your display name, change your password, export project backups, hide or restore library items, edit or remove your own public contributions, report content and close your account. Closing removes the account’s private workspace and active public contributions. Downloaded copies, material copies already saved into someone’s private project and necessary moderation records may persist. Earlier migration archives are separate; request their removal through the private support form.

Contact and requests

Use the private support form in Account for access, correction, deletion, migration or other privacy requests. These requests are visible to the product’s administrators, not to public forum members. If you cannot sign in, create a separate account to submit a request; never include a password or workspace key in a public post.

Private messages and referrals

Direct messages are visible to the two participants. Message text is checked using Gemini. Automatically held or reported private messages, including relevant conversation context, may be reviewed by the operator. Held messages are not delivered until approved. Do not send private contact details or sensitive information.

Invite codes link a new account to its referrer for participation rewards. We keep referral and points records to prevent duplicate rewards. Removing content reverses its points. Verified participation starts at 500 points unless configured differently; the badge does not establish identity or professional credentials.