Skip to content
Vulpilux
Menu

Privacy

Vulpilux LLC, a Utah limited liability company, runs vulpilux.com and the apps at vulpilux.app. We'd rather not know much about you, and we build everything that way: we collect only what each thing needs to work, we keep it on our own servers, and we never sell it or use it for advertising. This policy covers the website and all our apps; an app's own privacy page may add detail about that app.

This website

vulpilux.com collects nothing about you. No analytics, no cookies, no tracking pixels and no third-party scripts.

Email to us

If you email us, we keep the message and your address so we can reply and do the work you ask about. We don't add you to marketing lists, and we never sell or share your address.

Our apps

What we collect. Only what the app needs to work:

  • a display name you choose (you can change it later)
  • passkey credentials for signing in (public keys only)
  • your email address and phone number, if you choose to give them
  • what you create: listings, events, messages and the like
  • images you upload
  • a location, if an app asks for one and you choose to share it

Signing in. We use passkeys (WebAuthn/FIDO2). No passwords are stored. Your fingerprint or face never leaves your device; we receive only a cryptographic public key.

Where it's kept. On our own self-hosted servers. We use no third-party analytics, tracking or advertising, and we never share or sell your data.

Location. Where an app uses your location, for example to show nearby listings, we use it only for that. If you give an app an address, such as where to pick up an item, we keep it so the app can do its job, but we never show it to other members. Where a listing appears on a map, its position is deliberately obscured, so nobody can work out your address from it. At most, other members see a general area, such as a zip code.

Email from the apps. If you give an email address, we use it only for messages about your account and the app you're using: sign-in links, security alerts and notifications you've chosen. We send no marketing email. One delivery provider (Resend) sends these messages for us. Every notification email has a one-click unsubscribe link, and you can manage email preferences inside the app.

Text messages (SMS). If you opt in to text notifications in one of our apps, we use your phone number only to send the account alerts you chose (activity on things you've posted, messages, reminders and the like). Message frequency varies with your activity. Message and data rates may apply. Reply STOP to any text to unsubscribe, or HELP for help. Phone numbers and SMS opt-in information are never shared with third parties, affiliates or anyone else for marketing or promotional purposes. One SMS provider (Twilio) delivers the messages you asked for.

Cookies. The apps use one sign-in cookie to keep you signed in. It expires after 30 days of inactivity. No third-party cookies.

Deleting your data. You can delete your account yourself at any time from your account page in the app, or ask us to do it for you. Your profile and what you've created are then permanently removed. Where something you did also belongs to another member's history, such as an item they collected from you, their record keeps a "deleted user" placeholder in place of your name.

Server logs

Like any web server, ours record the requests they receive: IP address, browser and the page asked for. We use these logs only to run the services, stop abuse and fix problems.

Questions

Email [email protected], or use the contact page in the app you're using.

Last updated: 10 October 2026