← Back to BARKULATOR
At BARKULATOR, we take the security and privacy of your data seriously. This page outlines our security measures, compliance standards, and commitment to protecting your information.
92/100
Overall Cybersecurity Compliance Score
✅ Compliant with GDPR, CCPA, and international data protection standards
Compliance Standards
🇪🇺 GDPR
100%
Full compliance with EU General Data Protection Regulation
🇺🇸 CCPA
100%
California Consumer Privacy Act compliant
🍪 Cookie Law
100%
ePrivacy Directive & Cookie Consent
Security Measures
🔒
Data Encryption
In Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS)
At Rest: All data stored in our database is encrypted using AES-256 encryption
🔐
Secure Authentication
We use Supabase Auth for secure user authentication with:
- Password hashing with bcrypt
- JWT token-based sessions
- Automatic token refresh
- Secure cookie storage
🛡️
Content Security Policy
Our site implements strict Content Security Policy (CSP) headers to prevent:
- Cross-Site Scripting (XSS) attacks
- Code injection attacks
- Unauthorized third-party scripts
🔍
Regular Security Audits
We conduct regular security assessments including:
- Dependency vulnerability scans
- Code security reviews
- Penetration testing (when applicable)
- Compliance audits
Your Privacy Rights
We respect your data privacy rights under GDPR and CCPA:
| Right |
Description |
How to Exercise |
| Access |
View all data we have about you |
Account settings → Data Management |
| Rectification |
Correct inaccurate data |
Edit your profile directly |
| Erasure |
Delete your account and data |
Account settings → Delete Account |
| Portability |
Download your data in JSON format |
Account settings → Export Data |
| Object |
Object to certain data processing |
Email us at barkulator@gmail.com |
✅ Most privacy rights can be exercised directly from your account settings. No need to email us unless you need assistance.
Data Protection
What We Collect
- ✅ Account Data: Email address (for authentication only)
- ✅ Profile Data: Dog information you choose to save
- ✅ Technical Data: Browser type, device type (for optimization)
- ✅ Usage Data: Pages visited, features used (anonymized)
What We DON'T Collect
- ❌ Your real name (not required)
- ❌ Phone numbers
- ❌ Physical addresses
- ❌ Payment information (service is free)
- ❌ Location data beyond country
- ❌ Biometric data
How We Protect Your Data
- 🔒 Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- 🔐 Access Control: Strict role-based access, least privilege principle
- 🛡️ Secure Infrastructure: Hosted on Supabase with enterprise-grade security
- 📝 Audit Logs: All data access is logged and monitored
- 🔄 Backups: Regular encrypted backups with 30-day retention
Data Breach Response
In the unlikely event of a data breach, we have a comprehensive response plan:
- Detection: Automated monitoring alerts us immediately
- Containment: Incident response team activated within 1 hour
- Assessment: Scope and impact evaluated
- Notification: Affected users notified within 72 hours (GDPR requirement)
- Remediation: Vulnerabilities patched and systems secured
- Reporting: Supervisory authorities notified if required
⚡ 72-Hour Notification: We comply with GDPR Article 33/34 requirements for breach notification. You will be informed promptly if your data is affected.
Third-Party Services
We use the following trusted third-party services:
| Service |
Purpose |
Data Shared |
Privacy Policy |
| Supabase |
Database & Authentication |
Email, dog profiles |
View Policy |
| Google Fonts |
Typography |
None (no cookies) |
View Policy |
| GitHub Pages |
Hosting |
IP address (standard web hosting) |
View Policy |
All third-party processors:
- ✅ Are GDPR compliant
- ✅ Have signed Data Processing Agreements (DPAs)
- ✅ Use appropriate technical and organizational measures
- ✅ Cannot use your data for their own purposes
Cookie Policy
We use minimal cookies to ensure the service functions properly:
Essential Cookies (Always On)
- Authentication tokens: Keep you logged in (sb-access-token, sb-refresh-token)
- Session cookies: Maintain your session state
Optional Cookies (Requires Consent)
- Analytics cookies: Understand how users interact with the site (anonymized)
- Preference cookies: Remember your settings and preferences
Manage Your Preferences: You can change your cookie settings at any time using the
Cookie Settings button in the footer.
International Data Transfers
Your data may be transferred to and processed in:
- 🇪🇺 European Union: Primary data center location (Supabase)
- 🇺🇸 United States: Secondary processing and backups
Safeguards in place:
- ✅ Standard Contractual Clauses (SCCs) approved by EU Commission
- ✅ Adequate level of protection as required by GDPR
- ✅ Regular compliance assessments
Security Best Practices for Users
🔐 Protect Your Account:
- Use a strong, unique password
- Don't share your login credentials
- Log out on shared devices
- Report suspicious activity immediately
- Keep your email account secure (we send password resets there)
Continuous Improvement
Security is an ongoing process. We continuously:
- ✅ Monitor for vulnerabilities and threats
- ✅ Update dependencies and security patches
- ✅ Improve our security infrastructure
- ✅ Stay informed about emerging threats
- ✅ Update our policies to reflect best practices
Bug Bounty: If you discover a security vulnerability, please report it responsibly to
barkulator@gmail.com. We appreciate the security research community's help in keeping BARKULATOR safe.