Privacy at Toekyn
Effective October 18, 2026
This policy covers Toekyn’s website, pilot list and Toekyn Sell at app.toekyn.com. Toekyn Sell helps sneaker resellers organize original photos and prepare listing records. Contact omidizadjou@gmail.com about privacy, access, corrections or deletion.
Browser workspace
Browser mode stores records and original photos in IndexedDB on your device. Signing in does not automatically upload that workspace. You choose whether to transfer it to your private workspace. Clearing site storage can remove browser-only data. Complete downloaded backups include records and original photos; you control where those files are kept.
Accounts and Google sign-in
Google and Supabase process Google sign-in. We request basic email and profile access, and use your verified email and user identifier to recognize your account and associate your private workspace with it. Supabase may receive your Google name and profile picture as part of authentication. We do not request access to Gmail, Google Drive, Contacts or Calendar. Email sign-in uses Supabase and Resend to deliver a one-time code to your address.
Private records and photos
When you choose private storage, workspace records and original photos are sent to Toekyn’s Cloudflare infrastructure. Cloudflare D1 stores workspace records, photo metadata and application sessions; Cloudflare R2 stores original photos. Supabase stores account and authentication information. Saved private workspaces are associated with your account and are not public galleries. Authorized operators and service providers may access data to operate, support and secure the service.
Why we process information
We use information to provide sign-in, save and recover your workspace, deliver requested messages, answer support requests and prevent abuse. We do not sell workspace content or Google account data or use it for advertising. The live preparation workflow does not automatically publish photos or records to marketplaces. Provider-backed AI photo extraction is not enabled on this deployment. If that changes, we will explain the provider and data transfer before you use it.
Cookies, preferences and request information
Secure, HttpOnly cookies maintain your application session and temporary sign-in flow. Light/Stealth preferences are stored locally. Infrastructure providers process ordinary request information, such as IP addresses, timing, browser information and errors, to deliver and secure the service. Authentication callback query strings are redacted from application request logging. We do not use advertising cookies in the workspace.
Pilot list and external services
The pilot form stores your email and the request country code to contact you about access. It does not collect payment details. Exports and backups are downloads you control. If you submit information to a marketplace or another service, that service processes it under its own terms and privacy policy.
Retention, deletion and recovery
We retain saved account and workspace data while providing your account, unless you request deletion or we need to remove it for security or service operation. Signing out does not delete your account or cloud data. Removing a photo from the workspace does not by itself guarantee that all stored copies or prior save records have been erased. To request deletion of your account, photos, workspace or pilot-list entry, email the address above from the account address. We verify ownership before acting and confirm the result. Deletion from active systems may not immediately remove provider backups, security records or records we must retain for applicable obligations. These are subject to the providers’ backup and retention processes. Copies you downloaded or shared are outside our control.
Keep a complete backup of important records and originals. Cloud storage is not a guarantee against loss, and browser-only records cannot be recovered by us if your device storage is cleared.
Your choices and policy changes
You can use browser mode without signing in, download a complete backup, correct workspace records, sign out and request access or deletion. Depending on where you live, you may have additional privacy rights; contact us to exercise them. We will update this page when data handling changes and provide additional notice when appropriate.