Legal
Privacy Policy
Last updated: March 2026
Pantheon (“we,” “us,” or “our”) operates pantheonculture.com (the “Platform”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Platform, you agree to the practices described here.
1. Information We Collect
Information You Provide
- Account registration — email address, username, and password (or Google OAuth credentials) when you create an account.
- Profile information — optional demographic information and category preferences collected during onboarding to personalize your experience.
- Votes and rankings — your votes, list follows, and ranking activity on the Platform.
- Communications — any messages or feedback you send us directly.
Information Collected Automatically
- Session cookies — we use functional cookies managed by Supabase to maintain your login session. These are strictly necessary for authentication and cannot be disabled without logging you out.
- Anonymized page analytics — we use Vercel Analytics to collect aggregated, anonymized page view data. Vercel Analytics does not use cookies, does not track individual users, and does not collect personally identifiable information.
- Log data — standard server logs including IP address, browser type, pages visited, and timestamps, retained for security and operational purposes.
Information We Do Not Collect
- We do not use advertising trackers, behavioral profiling pixels, or third-party marketing cookies.
- We do not use web beacons for cross-site tracking.
- We do not collect payment information directly — we do not currently offer paid services.
2. How We Use Your Information
- To create and manage your account and authenticate your identity.
- To record and display your votes and rankings as part of the Pantheon collective record.
- To personalize list recommendations and category suggestions based on your stated preferences.
- To maintain the integrity and security of the Platform.
- To understand aggregate traffic patterns and improve the Platform (via anonymized analytics only).
- To communicate with you about your account, Platform updates, or your direct inquiries.
- To comply with applicable laws and enforce our Terms of Service.
3. Cookies
We use a single category of cookies on the Platform:
| Type | Purpose | Duration |
|---|---|---|
| Session / Auth | Maintains your authenticated login session via Supabase. Required for the Platform to function while you are logged in. | Session or up to 1 week |
We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Vercel Analytics, our page-view analytics tool, is cookieless.
You may disable cookies in your browser settings, but doing so will prevent you from signing in to your Pantheon account.
4. How We Share Your Information
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
We may share information in the following limited circumstances:
- Service providers — we use Supabase (database and authentication) and Vercel (hosting and anonymized analytics). These providers process data on our behalf under their own privacy policies and do not use your data for their own purposes.
- Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of Pantheon or its users.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Data Retention
We retain your account information and voting history for as long as your account is active or as needed to provide the Platform. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate operational purposes (such as fraud prevention or audit logs).
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate or incomplete information.
- Deletion — request that we delete your personal information (“right to be forgotten”).
- Portability — request your data in a structured, machine-readable format.
- Objection — object to certain types of processing, including direct marketing.
- Restriction — request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, please contact us at privacy@pantheonculture.com. We will respond within 30 days.
7. Do Not Sell or Share — Global Privacy Control (GPC)
We do not sell or share your personal information with third parties for cross-context behavioral advertising. This applies to all users, including California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
We honor the Global Privacy Control (GPC) signal. If your browser or device sends a GPC signal indicating you do not wish your data sold or shared, we already honor that preference by default — no additional opt-out action is required.
California residents may also submit a “Do Not Sell or Share My Personal Information” request to privacy@pantheonculture.com, though no sale or sharing is currently occurring.
8. Children's Privacy
The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@pantheonculture.com.
9. Data Security
We implement industry-standard security measures to protect your personal information, including encrypted data transmission (TLS), secure authentication via Supabase, and access controls limiting who can access user data. No method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
10. International Data Transfers
Pantheon is operated in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to this transfer. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy wherever it is processed.
11. Third-Party Links
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will notify registered users by email or via an in-app notice. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or your personal data, please contact us: