Privacy Policy
Last updated: January 2026
1. Introduction
WTF AI (“we,” “us,” “our”) respects your privacy. This policy explains what information we collect when you use wtfai.ai, how we use it, and your rights regarding that data.
2. Information We Collect
Account Information
When you sign in via OAuth (Google, GitHub, or other providers), we receive and store:
- Email address
- Display name
- Profile avatar URL
- OAuth provider ID
User-Generated Content
When you submit reports, we store the share link URL, your title, description, category selection, severity rating, screenshots you upload, and any reactions you make.
Automatically Collected Data
We use Google Analytics (via Google Tag Manager) to collect anonymized usage data including pages visited, time on site, device type, browser, and approximate location (country/region). This data is aggregated and not personally identifiable.
3. How We Use Your Information
- To provide and maintain the WTF AI platform
- To authenticate your identity and manage your account
- To display your submissions and attribute them (or anonymize them, per your preference)
- To improve the platform based on usage patterns
- To respond to takedown requests and enforce our Terms
4. Data Storage & Security
Your data is stored in Supabase, a hosted PostgreSQL database service with infrastructure in the United States. Supabase provides row-level security, encrypted connections, and regular backups. We use SSL/TLS for all data in transit. While we take reasonable measures to protect your data, no system is 100% secure.
5. Cookies
We use cookies for essential functionality and analytics. For detailed information, see our Cookie Policy.
- Essential cookies: Supabase authentication session tokens
- Analytics cookies: Google Analytics (via GTM) for anonymous usage tracking
6. Data Sharing
We do not sell your personal data to third parties. We may share data only in the following circumstances:
- Service providers: Supabase (hosting), Google Analytics (analytics), Vercel (hosting)
- Legal requirements: If required by law, regulation, or legal process
- Safety: To protect the rights, safety, or property of WTF AI or others
7. Your Rights
Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your account and associated personal data
- Export your data in a portable format
- Object to processing of your personal data
- Withdraw consent for optional data processing (e.g., analytics)
To exercise any of these rights, email us at privacy@wtfai.ai. We will respond within 30 days.
8. Data Retention
We retain your account data as long as your account is active. Submitted reports remain on the platform as part of the public archive unless you delete them or request removal. If you delete your account, your personal data (email, display name) is removed, but previously submitted reports may be anonymized and retained for archival purposes.
9. Children's Privacy
WTF AI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the latest revision at the top of this page. Continued use of the platform constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or requests, contact us at privacy@wtfai.ai.