Privacy

Effective 1 September 2026

Ponderfish is made by Koalition Interactive, LLC (Brooklyn, New York, USA). This page says what we collect, why, and what we never do. The short version: your ideas are yours, we collect the minimum a product like this needs to run, and we don't track you around the web or sell anything about you to anyone.

What we collect

• Your account. An email address, a display name, and either a password (stored hashed, never readable by us) or a Google sign-in. Authentication is handled by Neon Auth.
• Your ideas. The names, notes, and drawings you put in your pond. They are private by default. They become visible to other people only when you share them into a communal pond, and only to that pond's members. They are never public and never used for anything except showing them back to you and the people you chose.
• Billing. Payments run through Stripe. We never see or store your card number — Stripe sends us only your subscription status and a customer reference.
• The newsletter. If you subscribe to Catch of the Week we store your email address with Resend, our email provider, and use it to send that newsletter. Every issue has an unsubscribe link, and unsubscribing is the end of it.
• API tokens. If you connect a client (like an AI assistant), we store a hashed token so it can write to your pond. You can revoke tokens at any time.
• Feedback. If you send us something through the feedback form we keep what you wrote, and your email address if you gave one, so we can read it and reply. When you send it signed out we also keep a one-way fingerprint of your network address — never the address itself — purely so one sender cannot flood the form.
• Server logs. Our host (Vercel) keeps standard request logs — IP addresses, timestamps, URLs — for a short time, for debugging and abuse prevention.
• Traffic counts. We count page views with Vercel Web Analytics. It is cookieless and anonymous: we learn that a page was visited and roughly from where, never who you are, and nothing follows you off this site.

What we don't do

• No advertising, no ad trackers, no selling or renting data.
• No analytics cookies. Our traffic counting sets none; the only cookies are the ones that keep you signed in.
• No reading your ideas, except when required to operate the service (debugging a problem you report) or by law.
• No training AI models on your content.

Where it lives

Data is stored in the United States: the database with Neon, hosting with Vercel, payments with Stripe, newsletter email with Resend. Each of these processors handles data under their own privacy terms.

How long we keep it

As long as you have an account. Archived ideas stay archived (that is the product working, not a bug) until you delete them. If you want your account and everything in it deleted, or a copy of your data, email us and we'll do it — there is no self-serve delete yet, so a human handles it, promptly.

Your choices

• Export or delete everything: email us.
• Unsubscribe from the newsletter: the link in any issue.
• Cancel a paid subscription: the billing portal, any time.
• Revoke a connected client: the Connect page.

Children

Ponderfish is not for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, the new version appears here with a new effective date. A meaningful change (a new kind of data, a new processor) gets called out, not slipped in.

Contact

Koalition Interactive, LLC · Brooklyn, NY · andreas@koalition.com