Privacy Policy
Who we are
Kunesh Consulting NY LLC (“we,” “us”) operates biography.now (the “Service”). We are based in New York, United States. Contact: hello@kunesh.nyc.
What this policy covers
This policy describes how we collect, use, store, and share information when you visit biography.now, create an account, publish a page, or view someone else’s published page.
Information we collect
- Account. If you sign in with email, we store the email address and a hashed password (via Firebase Authentication). If you sign in with Google, we receive your Google account name, email address, and profile photo. Every account has a Firebase user ID.
- Page content you enter. Display name, title, biography, location, photo, links, social URLs, portfolio items, custom slug, SEO/meta fields, and theme choices. Unpublished edits may be stored as a draft.
- Uploaded photos. Avatars and other images you upload are stored in Google Cloud Storage.
- Page analytics. When someone views a published page, we record an aggregated view count by day and a mobile/desktop split. When someone clicks a link, social button, or portfolio item on a published page, we record the URL, label, and click count. These counts are how we show creators their stats; they are not optional marketing cookies and they are not controlled by the cookie banner. We hash the requester’s IP address to rate-limit these events. We do not store IP addresses on the view or click records themselves, and we do not set analytics cookies on published pages.
- Product analytics (optional). Google Analytics runs only if you tap “Accept analytics” on the banner (the landing page, builder, and legal pages). Until then we do not load Google’s script. If you choose “Essential only,” Google Analytics stays off. Published card pages never load Google Analytics.
- Abuse prevention. Google reCAPTCHA may run on account signup and collect device and browser signals as described in Google’s terms.
- Diagnostics. If the builder hits a JavaScript error, we may log the error message, stack, page URL, user agent, and optional account ID in Google Cloud Logging so we can fix bugs. We hash the requester IP to rate-limit these reports. These logs are not used to profile you.
- Local storage. Your browser may keep a sign-in session, a GDPR consent choice, and (during early access) a flag that you entered a valid invite code.
How we use it
We use this information to operate and host your page, authenticate you, show you your own view and click stats (legitimate interest in providing that part of the Service), prevent abuse, diagnose errors, and (if you use it) suggest a label for a portfolio link you add. We do not sell personal information and we do not use it for advertising or ad personalization. Google Analytics, if you opt in, is used only to understand how the marketing site and builder are used.
Public pages
If you publish a card, the content you put on it — name, photo, bio, links, and so on — is publicly available at biography.now/your-slug to anyone with the link. Search engines may index published pages. Unpublishing or deleting a page removes it from the Service; copies or caches made by others are outside our control.
Service providers
We use other companies to run the Service. They process data on our behalf, or as independent controllers of their own products:
- Google LLC — Firebase Authentication, Cloud Firestore, Cloud Storage, Firebase Hosting, Cloud Functions, Cloud Logging, Google Analytics, Google Fonts, reCAPTCHA, and Google Sign-In. Data is typically processed in the United States. Google’s own privacy policy applies to its services.
- Anthropic, PBC — if you add a portfolio URL and we suggest a label, the URL and publicly scrapable page title/description may be sent to Anthropic.
- Unsplash, Inc. — if you search or attach Unsplash photos.
- Simple Icons (cdn.simpleicons.org) — brand icons shown on cards.
- QR Server (api.qrserver.com) — QR code images in the share dialog.
We do not sell your data to these providers.
Cookies and similar storage
Firebase Authentication keeps a session in your browser so you stay signed in. Your GDPR choice and early-access flag live in localStorage. Google Analytics cookies (_ga, _ga_*) are set only if you accept optional analytics on the banner; they are never set on published card pages. reCAPTCHA may set cookies on signup. We do not use advertising cookies. First-party page view and click counts on published pages do not use cookies. To turn Google Analytics off later, clear this site’s data in your browser or email hello@kunesh.nyc.
Retention
Account and page data stay until you delete them or we shut down the Service. View and click aggregates stay until you delete your account. Diagnostic logs are kept for a limited operational period. Signing out does not delete your data.
Your rights
You can access and correct your page in the builder. Delete page removes that published card and frees the slug. Delete account removes your card, slug, drafts, view and click stats, uploaded avatar, and Firebase Auth account. For a copy of your data, or if something did not delete, email hello@kunesh.nyc. Depending on where you live (including the EEA, UK, and California), you may have additional rights and may lodge a complaint with a supervisory authority.
International transfers
We operate from the United States. Google and other processors may store and process data in the US and other countries. Using the Service from the EEA or UK involves a transfer of personal data to the United States.
Children
The Service is not directed at children under 13. Do not use it if you are under 13.
Changes
We may update this policy. The “Last updated” date will change. Material changes may also be noted in-app or by email.
Contact
Kunesh Consulting NY LLC — hello@kunesh.nyc
Also see our Terms of Service and Contact.