Privacy Policy

Last updated September 10, 2026

This page explains what Woodworking Wall collects and why. Email us with any questions.

What we collect

• Account info - your email and password, handled by our authentication provider (Supabase).
• Profile and projects - whatever you choose to add, including photos. Each is public or private, your choice.
• Designs - 3D project plans you save in the Design Tool.
• AI assistant connections - if you connect an AI assistant, it signs in through Supabase's OAuth service and we store no token for it at all. Each request it makes carries its own access token, which we hand to Supabase to confirm which account it belongs to. While connected, the assistant can read and change your own projects and designs the same way you can, and nothing outside your account. Disconnect it from the assistant's own connector settings to end that access.

How we use it

Public projects and profiles are visible to anyone, including people who aren't signed in. Private ones are visible only to you. We don't sell your data or run advertising.

One detail worth knowing: uploaded photos are stored at unlisted links, so a public project's photo can be opened by anyone who has that link. Switching a project from public to private moves its photo to a new link, which means any link shared while the project was public stops working.

Third-party services

• Supabase - database, authentication, and photo storage.
• Vercel - hosting.
• Umami - analytics on page visits.
• Claude - only if you choose to connect it yourself.

Your choices

• Switch any project or your profile between public and private at any time.
• Delete individual projects or designs yourself, and disconnect a connected AI assistant at any time from that assistant's connector settings.
• Create and revoke read-only API keys under “Developer access” on your own profile. We store only a hash of each key, never the key itself, so revoking one is the only way to stop it working — and nobody, us included, can show it to you again.
• To delete your account entirely, email us.

Not directed at children under 13. This policy may change; the date above will update when it does.