Privacy Policy

Last updated: March 2026

What we collect

Decant stores the following data in our database (hosted on Supabase):

Your email address (from authentication)
Articles you save (URL, extracted content, metadata)
AI-processed summaries and structured data
Chat history with articles
Custom AI scenario configurations

API key handling

Your OpenAI API key is stored exclusively in your browser's localStorage. When you process an article or use the chat feature, the key is sent to our backend worker, which uses it to make a single API call to OpenAI. The key is never written to our database or logged.

Authentication

Decant uses the shared Cashew Crate authentication service. Sign-in is handled through Google OAuth, Apple OAuth, or email/password via our centralized login page. Session data is managed through HTTP-only cookies.

Analytics

We use Google Analytics (GA4) with Consent Mode v2. Analytics cookies are not set until you explicitly accept cookies via the consent banner. Before consent, GA operates in cookieless mode.

Data deletion

You can delete individual articles and chat history at any time through the app. To delete your entire account and associated data, email support@cashewcrate.com.

Third-party services

Supabase — database hosting (your saved articles and chat data)
Cloudflare — backend worker hosting and CDN
OpenAI — AI processing (using your own API key)
Google Analytics — usage analytics (with consent)

Contact

For privacy-related questions, email support@cashewcrate.com.