What we hold. What we don’t.

No tracking pixels. No analytics. No ads. No data sold, ever. Lighting a candle without signing in is anonymous … we store a timestamp and a count, nothing tied to you.

• Email address. Required to open a door. Used to send your magic-link sign-in email and product transmissions you explicitly opt into. Never shared.
• Your candles. A row per candle you light, with a timestamp.
• Optional profile bits. A handle, a city, a one-line “why you’re here,” an avatar emoji. All optional. All controlled by you in /me.
• Quiet mode. Toggle in /me. With Quiet mode on, your candles count toward the total but never appear on the public candle wall or ticker.

If you sign in with Google or Facebook, those providers tell us your verified email address and nothing else. We don’t receive your friends list, your posts, your contacts, or anything of the kind. We don’t post anywhere on your behalf.

Supabase (Postgres, Canada region). Magic-link emails ship through Resend. That’s the whole list. Both are vendors we pay; neither is given access to use your data for their own purposes.

One tap in /me → Delete my data. Your profile, your candles, your email … gone. Anonymous candle counts you’ve added stay in the aggregate total (we can’t tell which were yours after the delete).

Or write hello@bigloveaffair.com from the email on file. We’ll confirm and remove within 7 days. Standalone walkthrough at /data-deletion.

/quiet accepts anonymous lines without sign-in or any identifying information. We don’t log IP addresses for that surface. That’s by design and it stays that way.

If this page changes in a way that affects you, the change shows up on /build the day it ships. No surprise updates.

hello@bigloveaffair.com. A person reads it. Northumberland, Ontario.