PRE-LAUNCH DRAFT · OPERATOR REVIEW REQUIRED

Privacy notice draft

The operator must add its identity, contact information, applicable terms, and data handling details before opening registration to the public.

Account and profile data

Supabase stores account credentials and profile data. Published profiles and enabled links can be read publicly. Draft profiles remain owner-only. Uploads are stored privately. Only the owner can access unused uploads and draft media. Media referenced by a published profile is delivered to its visitors through an access check. Discovery in Explore is a separate opt-in.

Analytics

Profile visits and link clicks use a daily salted hash of request characteristics to reduce duplicate events. No analytics cookie is set. Event records do not contain raw IP addresses. Short-lived hashed request keys are used for rate limiting. Schedule the provided cleanup function to enforce the 90-day retention window.

Before public launch

The operator needs to specify the controller, contact address, hosting locations, processors, retention and deletion procedures, and applicable visitor choices. Account deletion and data export currently require an operator-run Supabase procedure.