Back to Home
Trust, Security & Compliance

Privacy Policy

Last Updated: October 7, 2026 • Effective Date: October 7, 2026

1. Introduction & Scope

Welcome to SlurpingNoodles ("we", "our", or "us"), accessible at https://slurpingnoodles.xyz. We are dedicated to creating healthy digital and physical "Third Places" where individuals can discover books, participate in study circles, connect with tutors and mentors, and cultivate community.

This Privacy Policy explains how we collect, use, store, protect, and share your personal data when you visit our website, register an account, or interact with our community services. By using SlurpingNoodles, you acknowledge and agree to the practices outlined in this policy.

2. Information We Collect

A. Authentication & Google OAuth Data

When you sign in to SlurpingNoodles using Google OAuth (Sign in with Google), we receive basic profile information that you authorize Google to share with us:

  • Your full name and display name
  • Your primary Google email address
  • Your Google profile avatar / photo URL
  • Your unique Google account identifier (sub / user ID)

We only request basic authentication scopes: openid, email, and profile. We never request access to your Gmail inbox, Google Drive, Google Contacts, or private files.

B. User-Generated Community Content

Depending on how you use our platform, you may choose to submit information including:

  • Book Nook: Books you list, swap offers, ratings, and book recommendations.
  • Book Roulette & Meetups: Events you host, study circles you create, and meetup RSVPs.
  • Tutors & Mentors: Subject areas, hourly rates, bios, and mentoring endorsements.
  • Public Profile: Optional biography, pronouns, and university/campus affiliation.

C. Cookies & Technical Data

We collect standard technical information strictly necessary to operate and secure the platform:

  • Session & Auth Cookies: Secure HTTP-only tokens issued by Supabase to maintain your authenticated login session.
  • Local Storage: Client-side preferences (such as dark mode theme and non-sensitive UI states).
  • Technical Logs: IP addresses, browser types, and standard access timestamps for security auditing, fraud prevention, and performance monitoring.

3. Google API Services User Data Policy & Limited Use Disclosure

SlurpingNoodles' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with Google's Limited Use requirements:

  • No Advertising: We do not use or transfer user data received from Google APIs to serve personalized, re-targeted, or interest-based advertisements.
  • No Data Selling: We do not sell, rent, or trade Google user data to data brokers or third parties under any circumstances.
  • No AI Model Training: We do not use Google user data to train, fine-tune, or develop general-purpose machine learning or artificial intelligence models without your affirmative, explicit consent.
  • Restricted Human Access: Human access to user data received via Google APIs is strictly prohibited, except:
    • When you provide explicit, affirmative agreement to troubleshoot a specific support request;
    • When required for security investigations (such as investigating abuse, spam, or malicious intrusions);
    • To comply with applicable law, legal processes, or enforceable governmental requests; or
    • When the data is aggregated and anonymized for internal system performance reporting.

4. How We Use Your Information

We use the information we collect solely to provide, maintain, and improve our services:

  • To verify your identity and manage your authenticated user session.
  • To display your public profile, listings, and contributions on the platform.
  • To facilitate peer book swaps, study circle RSVPs, and tutoring connections.
  • To monitor, detect, and prevent fraudulent activity, spam, and abuse.
  • To respond to your questions, feedback, and customer support inquiries.

5. Data Sharing & Third-Party Service Providers

We do not monetize your personal information. We only share data with essential infrastructure providers ("Sub-Processors") who adhere to strict data security standards:

Supabase Inc.

Database hosting, row-level access control, and authentication token management.

Vercel Inc.

Global edge application hosting, serverless execution, and frontend delivery.

Google LLC

Identity provider for secure federated OAuth authentication.

6. Data Security & Storage

We employ modern, defense-in-depth security measures to protect your information:

  • Encryption in Transit: All web traffic is strictly encrypted using HTTPS / TLS 1.3.
  • Row-Level Security (RLS): Our database enforces granular PostgreSQL RLS policies ensuring users can only read and mutate data they own or are explicitly authorized to access.
  • Encrypted Storage: Data at rest is encrypted using industry-standard AES-256 protocols.

7. Your Rights, Data Deletion & Revocation

You retain complete control over your personal data:

  • Access & Portability: You may request a copy of the personal data we maintain about you.
  • Correction & Update: You may update or correct your profile details anytime via your account settings.
  • Right to Deletion: You may request that we permanently delete your account and all associated personal data by emailing us at slurpingnoodles@googlegroups.com. We will process your deletion request within 30 days.
  • Revoking Google OAuth Access: You can independently revoke SlurpingNoodles' access to your Google Account at any time via your Google Account Security Settings.

8. Children's Privacy (COPPA)

SlurpingNoodles is not directed to individuals under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If you believe a child under 13 has provided personal data to us, please contact us immediately at slurpingnoodles@googlegroups.com, and we will promptly delete the data.

9. Changes to this Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our service or legal requirements. Material updates will be communicated by revising the "Last Updated" date at the top of this document or via a notice on our homepage.

10. Contact Us

If you have questions, privacy concerns, or data deletion requests, please contact our team:

SlurpingNoodles Privacy Team

Support Email: slurpingnoodles@googlegroups.com

Homepage: https://slurpingnoodles.xyz