Privacy Policy

Who we are

Seconded is a social curation product that lets you save items (links) and lets others follow your saves. Authentication and data storage are provided by Google Firebase.

Data we collect

• Account & profile data. When you sign in with Google or Apple, we receive your email address, display name, and profile picture via the email, profile, and openid scopes. If you register with an email address and password instead, we receive your email address, and your password is handled entirely by Google Firebase Authentication — we never see or store it. We use this to create and identify your account.
• Saved items. The page URLs and titles you choose to save, plus any notes, tags, and metadata (such as Open Graph title, description, and thumbnail fetched from the page) associated with them.
• Authentication tokens. To keep you signed in, we store a Firebase ID token, a refresh token, and a minimal profile. In the browser extension these are stored locally in chrome.storage.local on your device; in the web app they are held in a secure, HttpOnly session cookie.
• Usage & analytics data. Across the web app, browser extension, and iOS app, we collect product-usage events — such as sign-up/sign-in method, items saved or opened, and screens viewed — via Firebase/Google Analytics, to understand how Seconded is used and to improve it.
• Advertising identifier (iOS only). The iOS app shows ads via Google Mobile Ads. With your permission, granted through Apple’s App Tracking Transparency prompt, we use your device’s advertising identifier (IDFA) to personalize those ads based on your activity in other companies’ apps and websites. If you decline, the app still shows ads, just not personalized ones. The web app and browser extension do not show ads.

How the browser extension uses your data

The extension has a single purpose: save the active page to your Seconded collection. It uses Chrome’s native identity flow to sign you in with Google, stores your session tokens locally on your device, and sends the URL and title of pages you explicitly save to the Seconded Items API. It does not track your browsing history or read pages you have not chosen to save.

How we use your data

• To provide, maintain, and secure your account and saved items.
• To display your public saves to followers, when you mark them public.
• To enrich saved links with page metadata for a better display.
• To detect and prevent abuse, fraud, and security incidents.
• To understand product usage and improve Seconded, through analytics.
• To show ads in the iOS app, personalized only if you grant tracking permission.

We do not sell your personal data. Your saved items and their content are never used to target ads or shared with advertisers — ad personalization on iOS relies only on the device-level advertising identifier described above, and only with your permission.

Data sharing

We share data with infrastructure and service providers that operate Seconded on our behalf: primarily Google Firebase (authentication, database, and hosting), Google Analytics (product-usage analytics, across web, extension, and iOS), and, on iOS only and only if you grant tracking permission, Google Mobile Ads (ad personalization using your advertising identifier). Items you explicitly mark public are visible to other Seconded users. We may disclose data if required by law.

Data retention & deletion

We keep your data while your account is active. You can delete your account at any time, which removes your profile, your saved items, and your follow relationships, and revokes your active sessions. To request deletion or to exercise your access, correction, or portability rights, contact us at privacy@getseconded.com.

Revoking your consent

You can withdraw permission for the data collection described above at any time:

• Ad tracking (iOS). Turn off tracking permission for Seconded in iOS Settings › Privacy & Security › Tracking. We stop using your advertising identifier immediately. Because iOS then blocks requests to the ad networks we disclose in the app’s privacy manifest, you will typically see fewer ads or none at all. No other part of Seconded is affected.
• The browser extension. Removing the extension from your browser deletes the session tokens it stored on your device and ends its access to your account.
• Everything else. Deleting your account, from Settings in the iOS app, ends all collection tied to your account and removes the data described below. You can also email us to object to or restrict a specific use without deleting your account.

Your rights

Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. We honor these requests for all users.

Children

Seconded is not directed to children under 13, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this policy? Email privacy@getseconded.com.