Privacy policy

01 / Scope

This policy covers this website and MathPhysicsShopManager, the local application we use to manage artwork, shop information, and social publishing. Customers buy through our Etsy shop; Etsy handles checkout under its own privacy policy.

The application currently connects to our Instagram, Bluesky, and Tumblr accounts and supports individual publishing actions. Unattended scheduling is not enabled. Pinterest is not connected or accessed by the current application. If Pinterest integration is enabled later, this policy will be updated before it handles Pinterest data or publishes Pins.

For a future Pinterest connection, the intended permissions are user_accounts:read to confirm our authorized account, boards:read to select a destination board, and pins:write to publish artwork individually chosen by the owner. Those are intended capabilities, not functions of the current version.

02 / Account information accessed

• Connection details: application credentials, OAuth access and refresh tokens where the platform uses them, permissions, expiration information, and a Bluesky app password supplied by the owner. We do not collect the owner’s ordinary social account passwords.
• Social account checks: Instagram account ID, username, account type and permission status; Bluesky handle and account ID; Tumblr username, blog names and URLs. These checks confirm that the selected account is ours before publishing.
• Publishing materials and results: artwork and captions supplied by the owner, draft details, selected accounts, published post IDs, links, and status records. Published posts are public according to the chosen platform’s settings.
• Shop data: authorized Etsy and Printify shop, product, listing, and limited order summaries. Local order summaries omit customer names, email addresses, shipping addresses, and messages.
• Correspondence: if you contact us by email, we receive your address and whatever you choose to send.

We do not request social direct messages, contact lists, followers, or unrelated account activity.

03 / How we use information

We use account information to connect and verify our own accounts, prepare and publish approved artwork, check results, and resolve errors. We send an approved image, caption, and required account information to the selected platform when publishing. Instagram may retrieve an approved image from a public image URL. We use correspondence to answer requests.

We do not sell or rent platform data, use it for targeted advertising, or train AI models on it. We do not use Pinterest API data because the current application does not access Pinterest. Each social platform processes information under its own privacy policy.

04 / Tokens and security

Application secrets, OAuth tokens, and the Bluesky app password are held in a local credential vault encrypted with Windows Data Protection API (DPAPI), tied to the owner’s Windows account. The application does not save credentials in plain text. Its management interface is available only on the owner’s computer, and OAuth callbacks use local HTTPS. Credentials are never included in this public website.

Local artwork, drafts, and the shop database are not encrypted by the application; their protection also depends on access controls and backups on the owner’s device.

05 / Retention

Credentials and tokens stay in the encrypted vault until replaced or locally removed; token expiry does not automatically delete the stored record. Local artwork, drafts, social account checks, and publication records have no automatic deletion schedule. Etsy and Printify snapshots have a cache lifetime of one hour and are purged when the app runs its cleanup; an expired snapshot can remain on disk while the app is stopped. We keep privacy correspondence as needed to respond to requests and meet applicable obligations.

No Pinterest account, board, or Pin data is currently retrieved or retained. Before any future Pinterest access, we will review storage and use against Pinterest’s developer guidelines.

06 / Disconnecting and deleting data

The owner can use the app’s local disconnect command for Instagram, Bluesky, or Tumblr to remove that connection’s saved credentials and tokens. Local disconnection does not necessarily revoke a platform authorization; the owner must also remove access in that platform’s connected-app settings where available.

Disconnecting does not automatically delete saved Instagram profile checks, artwork, drafts, publication records, or backups. To request access, correction, or deletion of information we hold, email thepartialderivative@gmail.com with “Privacy request” in the subject. We may verify the request and will respond as required by applicable law. Please do not email passwords or tokens.

Deleting local files does not remove posts already published on social platforms. Those must be managed through the relevant platform.

07 / Website visitors

This is a static website. We do not add analytics, advertising pixels, forms, or site cookies. A visit does not connect a social media account or expose the private application. Cloudflare and our web server may process IP addresses and request logs to deliver and protect the site. Email is handled by your email provider and our Gmail inbox.

08 / Contact and updates

The Partial Derivative
thepartialderivative@gmail.com
Application: MathPhysicsShopManager

We will revise this policy and its date when our data practices change.