Privacy Policy
Last updated: June 15, 2026
fave.work ("fave.work", "we") is a portfolio builder. This page explains what data we collect, why, and what you can do about it. We keep this short and specific because the service itself is deliberately minimal.
What we collect
- Account data. Your email address. If you sign in with Google, we receive your email and a Google account identifier; we do not receive your password and we do not store Google access or refresh tokens.
- Your content. The works, images, text and portfolios you create. This is the data you choose to publish or keep as drafts.
- Security data. To prevent abuse and brute-force attempts we store a one-way hash of your IP address and browser user-agent alongside sessions and login tokens. These are hashes, not the raw values.
- Cookies. Strictly functional cookies for your login session and CSRF protection. No analytics, advertising or third-party tracking cookies.
Why we use it
- To provide the service: host your portfolios and serve them at your address.
- To authenticate you and keep your account secure.
- To prevent abuse (rate limiting, spam and brute-force protection).
- To send you transactional emails (login links and verification codes).
Who we share it with
We do not sell your data and we do not share it with advertisers. We rely on a small number of service providers strictly to operate fave.work:
- Google, if you choose to sign in with Google (authentication only).
- An email delivery provider to send login emails.
- Our hosting provider, where the application and database run.
Your published portfolios are, by design, publicly visible at their URLs. Portfolios kept as drafts are not served publicly.
Retention
We keep your account data and content for as long as your account exists. Login tokens and sessions expire automatically. Security hashes are short-lived. If you ask us to delete your account, we remove your account data and content.
Your rights
You can request access to, correction of, or deletion of your personal data. To do so, contact us at the address below. Depending on where you live, you may have additional rights under laws such as the GDPR.
Children
fave.work is not directed at children under 13, and we do not knowingly collect their data.
Changes
We may update this policy as the service evolves. Material changes will be reflected by the date above.
Contact
Questions or requests: contact@fave.work.