Privacy
What MadamNazar.io collects, why, and which services handle it.
Who runs the site
MadamNazar.io is run by Lucas Bonomi, who decides what the site collects and why. You can reach him at contact@lucasbonomi.com.
Without an account
You can use the daily location, the maps, the deck builder and the resources without signing up. The site still loads these services on every page:
- Google Analytics 4: counts page views and clicks (for example which tools are used and when a Premium checkout starts).
- Hotjar: records how pages are used (clicks, scrolls) to find layout problems.
- Google AdSense: shows the ads that pay for the site. Google may use cookies to choose and measure ads. Premium members see no ads.
- Google Fonts: serves some of the fonts.
These services set their own cookies and receive your IP address and browser details. Images of the daily location come from madamnazar.github.io.
With an account
Accounts use Supabase (sign-in by email and password or with Google). The site stores your email address, your Premium status and preferences (daily email, push notifications, leaderboard name), your Nazar streak, your feature request votes and, for Premium members, your My Spots pins and routes.
- Stripe handles payments for Premium and the developer API. The site never sees your card number; it keeps the Stripe customer and subscription IDs.
- Resend sends the daily location email and account emails. Every promotional email has an unsubscribe link.
- Web push: if you turn on notifications, your browser's push subscription is stored to send the daily location.
Premium members can download a JSON export of their account data from their account page.
Cookies and local storage
Besides the cookies of the services above, the site keeps a few settings in your browser: the colour theme, your sign-in session, map preferences and route order for My Spots, a plan you picked before signing in, a referral code, and whether a notice was already shown. They never leave your browser except the sign-in session, which is sent to Supabase.
Hosting
The site and its API run on Netlify, which keeps standard server logs (IP address, requested URL, time) for operating and securing the service.
Questions
To ask what the site holds about you, correct it or have your account deleted, email contact@lucasbonomi.com. See also the contact page.