Privacy
1. Overview
C3DB is a personal, non-commercial project run by Yvonne Liu. This page explains what data we collect, why, and what we do with it. Questions: [email protected].
2. What we collect
- Account info — if you create an account, we store the email address and authentication credentials via Firebase Authentication. We never see or store your password in plain text; Firebase handles that.
- API keys — when you mint an API key, we store only its SHA-256 hash, plus the account it belongs to and a creation/revocation timestamp. The raw key is shown to you once and never stored.
- Standard request logs— like most web services, our hosting providers (Google Cloud Platform, Cloudflare) log standard request metadata (IP address, timestamp, requested endpoint) for security and abuse prevention. We don’t use this for tracking or profiling.
3. What we don’t collect
- No third-party analytics or ad-tracking scripts.
- No tracking cookies beyond what’s required to keep you signed in.
- No AI/LLM API keys — if you use the “ask” or MCP features, your AI client (e.g., Claude Code) calls the model directly with your own key. That key never passes through or is stored on C3DB’s servers.
- We don’t sell or share your data with third parties for marketing.
4. How we use it
- Authentication and account access.
- Transactional email (e.g., password reset), sent via Resend.
- Security and abuse prevention.
5. Third-party processors
We rely on a small number of infrastructure providers to run C3DB:
- Google Cloud Platform / Firebase — hosting, authentication, database (Firestore, BigQuery).
- Resend — transactional email delivery.
- Cloudflare — frontend hosting and CDN.
Each processes data only as needed to provide their part of the service, under their own privacy terms.
6. Data retention
Account data is kept while your account is active. If you want your account and associated data deleted, email us and we’ll remove it, other than records we’re required to keep for security/abuse logs for a limited time.
7. Your rights
You can request a copy of the data we hold on your account, or ask us to delete your account, at any time — email [email protected].
8. Children’s privacy
C3DB isn’t directed at children, and we don’t knowingly collect data from anyone under 13.
9. Changes
This policy may change as the project evolves. Material changes will be reflected here with an updated date.