Privacy Policy

pwrtheme (“we”, “us”) operates https://www.pwrtheme.com. This page explains what data we collect, why we collect it, and who processes it on our behalf. We try to keep this short and concrete.

You can use the editor without signing in — in that case we collect nothing about you beyond anonymous, aggregated traffic statistics. Signing in is required to download files and save themes and brands to your account.

1. What we store about signed-in users

When you sign in (via Google or by requesting a magic link), we store:

• Your email address
• A unique user identifier issued by our authentication provider
• If you sign in with Google: your display name and avatar URL provided by Google
• An authenticated session token (set as an HTTP-only cookie on your browser)
• Authentication timestamps (created, last sign-in)

We do not store passwords. Authentication is handled by Supabase (see processors below).

2. What we store about your themes and brands

When you click Save in a builder, we store the Power BI theme, Excel theme or brand you're working on:

• The name you chose
• Its settings as JSON: colors, fonts and styles, and for Power BI themes the visual settings and canvas configuration
• For Power BI themes, the theme schema version targeted
• The brand a theme follows, if any
• Created and last-updated timestamps
• A reference to your user identifier so we can show you what you saved

Each row is protected by row-level security: only your own account can read, update, or delete it. You can delete any theme or brand in the builders at any time, which removes it permanently from our database.

3. Email

We send two kinds of email:

• Account email: sign-in links, and notices about important changes to the service or this policy. These come with having an account.
• News and offers: only if you ask for them. After you sign in, we ask whether you want email about new features, with occasional tips and offers on paid products. The box isn't ticked until you tick it.

Each time you choose, we store what you chose, when, where you made it (the question after signing in, or Email preferences in the account menu) and the wording you saw, so we can show what you agreed to. We send news and offers only with your consent, and you can withdraw it any time under Email preferences, or with the unsubscribe link in every such email.

4. Anonymous usage analytics

We use Vercel Web Analytics to count page visits and understand which features are used. The data is aggregated and anonymous — no cookies are set, no cross-site tracking, no profiles are built. The identifiers Vercel uses to deduplicate visitors are hashed daily and not stored. See Vercel's Web Analytics privacy documentation for details.

5. Server logs

Like most web services, our hosting provider logs basic request data — IP address, user agent, request path, response code, timestamp — for a short period for security, abuse prevention, and debugging. These logs are not used to build user profiles.

6. Cookies

We use one category of cookie:

• Authentication cookies — set after you sign in, used to keep you signed in across requests. HTTP-only and secure. Cleared when you sign out.

We do not use advertising, marketing, or third-party tracking cookies.

The builders also keep a few things in your browser's own storage: an unsaved brand while you work on it, and whether you've answered the email question on this device. They stay on your device and aren't sent to us.

7. Sub-processors

We use the following service providers to run pwrtheme:

• Vercel Inc. — application hosting, edge network, and Web Analytics. Vercel may process data in the United States and the EU. See Vercel's privacy policy.
• Supabase Inc. — authentication and database (PostgreSQL) for your account and saved themes. See Supabase's privacy policy.
• Google LLC — only if you choose “Continue with Google” on the sign-in page. Google handles the OAuth flow and shares your email, name, and avatar with us.

8. Your rights

Under GDPR and similar laws, you have the right to access, correct, export, and delete your personal data. You can:

• Delete individual themes and brands in the builders
• Change or withdraw your email choice under Email preferences in the account menu
• Request deletion of your entire account (and all associated themes) by emailing us
• Request a copy of all data we hold about you

Contact us at the email below for any of the above.

9. Data retention

Account data and saved themes are retained until you delete them. If you stop using your account, your data remains until you request deletion. Server logs and analytics are retained per the providers' standard retention windows (typically 30 days for logs).

10. Children

pwrtheme is not directed at children under 13, and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted at the top of the page. The “Last updated” date above always reflects the most recent revision.

12. Contact

Questions, deletion requests, or concerns? Email informasjon@rates.no.