Privacy.

The short version

BUÉE keeps the data needed to run your account and uses privacy-focused traffic analytics. No ads, no third-party advertising cookies and no sale of personal data.

What we collect

Four kinds of things, all of them yours:

• Your email address — used only to sign you in and, if you ever lose access, to get you back in. We never email you marketing.
• Profile data you choose to provide — username, display name, bio, skin type and concerns. All of it is public by design; write your bio accordingly.
• Private recommendation preferences — your broad skincare experience level, budget and onboarding choices. They are visible only to you and used to adjust guidance and discovery.
• What you post — public logs, ratings, reviews and routines, plus private journal entries and any photos you upload. Visibility is stated where you publish.

One aggregate, anonymous exception: when anyone follows an outbound “buy” link, we increment a click counter for that product and retailer. The counter stores no user id, no session and no IP. Outbound buy links are affiliate links (see our terms), which may earn BUÉE a commission at no cost to you.

We measure traffic and product usage with first-party, pseudonymous events kept for 90 days. They contain a random per-tab session id, broad route and bounded product signals — never IP addresses, search text, email, username or member content. Essential cookies keep your session, language and display preferences.

Who touches the data

BUÉE operates the service with three narrowly-scoped infrastructure providers:

• BUÉE infrastructure — the application, self-hosted Supabase database, authentication and photo storage run together on our European VPS.
• Mega — encrypted off-site disaster-recovery copies, retained for a limited technical period.
• Resend — transactional sign-in email delivery only.

No behavioural advertising or third-party analytics provider receives your activity. We do not share, rent or sell member data.

How long we keep it

Until you delete your account. Deletion removes your profile and attached content from the active service. Raw first-party analytics expire after 90 days; encrypted local and off-site backups expire under their 7-day and 21-day technical retention windows.

Your rights

You can access, correct and delete your data. Access and rectification are self-serve: everything you have given us is visible on your profile and editable in Settings. Deletion is self-serve too — the “Delete my account” button at the bottom of Settings removes your account and all of your content, immediately and permanently.

Contact

A dedicated privacy inbox is not active yet. Until it is published here, the self-service access, editing and deletion tools are the fastest way to exercise your rights.