Privacy Policy

Last updated: April 26, 2026

This Privacy Policy describes how Hot Mess (a product of Material Instincts, "we", "us", or "our") collects, uses, and protects information about you when you use our service.

Information We Collect

• Account information: when you sign up, we collect your email address, display name, and profile photo. If you sign in with Google, we receive these from your Google account via OAuth.
• Application data: any content you create or upload while using the service.
• Cookies: we use cookies strictly for authentication (keeping you signed in). We do not use third-party advertising cookies.
• Diagnostic data: server logs may include your IP address, user agent, and request paths for debugging and abuse prevention.

How We Use Your Information

• To provide and operate the service.
• To authenticate you and keep your account secure.
• To respond to your requests for support and to send important service notices.
• To analyze and improve the service.

Google OAuth and Limited Use

Hot Mess's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google account data to authenticate you and provide the service's core functionality.

How We Store and Protect Your Data

Account and application data is stored in our secure database infrastructure (Supabase / self-hosted Postgres). Connections to our services are encrypted in transit via TLS. We restrict access to data to authorized personnel only.

Sharing Your Information

We do not sell your personal information. We share data only with the infrastructure providers we use to operate the service (e.g. Supabase for database hosting, Cloudflare for DNS, Mailgun for transactional email) and only as necessary for them to deliver their service to us.

Your Rights

You can request to access, correct, export, or delete your personal data at any time by emailing hello@instinct.is. We will respond within a reasonable timeframe.

Children

The service is not directed to children under 13, and we do not knowingly collect data from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the service or by email. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email hello@instinct.is.