Privacy policy
Comanifest is built for collective intention — not surveillance. This page explains what we collect, why, and what stays private.
Effective date: 25 May 2026
Who we are
Comanifest ("we", "us") runs the website and service at comanifest.org (and related subdomains). If you have questions about this policy, contact us at hello@comanifest.org.
What we collect
Account and session data. When you browse or participate, we create or use a Supabase auth session. You may use the site as an anonymous guest, or sign in with email via a one-time magic link. If you sign in, we store your email address and a user identifier tied to your activity.
Manifestations you start. When you manifest something new, we store the title, intention, category, end date, optional timeframe text, and related metadata (such as when it was created and how many people are holding it). Manifestation content is public and visible in the feed, search, and share links.
Holds and commitment notes. When you hold someone else's manifestation, we store your private commitment note and link it to your account. Commitment notes are not shown to other users and are not included in hold-update emails to creators.
Notification preferences. If you sign in with email, you can choose how often creators receive hold updates (instant, daily, weekly, or off). We store that preference with your account.
Creator reflections. After a manifestation ends, creators may add a reflection. That text is stored and shown on the manifestation page when provided.
Technical data. We use cookies and similar storage to keep you signed in. Our hosting and database providers may log standard request data (such as IP address, browser type, and timestamps) for security and reliability. When you manifest or hold, we may store an approximate country code derived from your connection (for aggregated community statistics only — never shown on your public profile or manifestation page). When bot protection is enabled, Cloudflare Turnstile may process interaction signals to help block abuse.
How we use your information
- Run the service — manifest, hold, browse, search, and account pages.
- Link your activity to your session or email account.
- Send transactional email: magic-link sign-in and, if you opt in, hold-update notifications to manifestation creators.
- Protect the community from spam and abuse.
- Maintain, secure, and improve the platform.
We do not sell your personal information. We do not use your data for third-party advertising.
What is public vs private
Public: manifestation titles, intentions, categories, end dates, hold counts, creator reflections, and aggregate community activity.
Private to you: your commitment notes when holding someone else's manifestation, and your notification preferences.
Not displayed to others: your email address and internal user identifier. Other users cannot browse a list of who is holding a manifestation.
Service providers
We use trusted processors to operate Comanifest. They handle data only on our instructions and for the purposes described here:
- Supabase — authentication, database, and row-level security.
- Vercel — application hosting and delivery.
- Resend — transactional email (sign-in links and hold updates).
- Cloudflare Turnstile — optional bot protection for anonymous sign-in.
Each provider has its own privacy practices. Where they process data outside your country, appropriate safeguards may apply under their terms and applicable law.
Cookies and local storage
We use essential cookies and browser storage to maintain your Supabase session and keep you signed in. These are necessary for the site to work. We do not use analytics or advertising cookies at this time.
How long we keep data
We retain account and content data while your account exists and as needed to operate the service. If you delete your account or ask us to remove personal data, we will delete or anonymise it where we can, except where we must keep certain records for legal, security, or backup reasons. Public manifestations may remain visible until archived or removed under our community guidelines.
Your choices and rights
You can browse without signing in with email. You can withdraw a hold from your account page. Email users can change notification frequency in My account.
Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal data, or to object to certain processing. To exercise these rights, email hello@comanifest.org. We will respond within a reasonable time.
Children
Comanifest is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will post the revised version on this page and update the effective date above.