Privacy Policy
We store the minimum we need to run the square and nothing more.
What we store
- Your email address, so we can send order confirmations and moderation updates
- Order details — which slot, how much, when
- An anonymous avatar seed, so your character looks the same each visit if you never sign in
- Aggregate click and impression counts for boards, so owners can see foot traffic
Accounts & sign-in
Signing in is optional — you can browse and walk the square anonymously. Creating an account lets your character and display name persist across visits and lets you chat under a name.
You can sign in two ways:
- Google — Google shares your name, email address, and Google account ID with us so we can create your account. We do not import or store your Google profile photo; the avatar you appear as in the square is one you build yourself in the avatar wizard, unrelated to your Google account's picture.
- Email and password — we store your email and a securely hashed password. We never see or store your password in plain text.
Once signed in, we store your email, the display name and avatar you chose during onboarding, and — if you buy a board while signed in — your order history.
Authentication is handled by Supabase, our database and login provider. Supabase processes your sign-in on our behalf and never sells your data. See Supabase's privacy policy for how they handle it.
Want your account and its data deleted? Reach us through the site and we'll delete it — this doesn't affect order records we're required to keep for tax and payment purposes.
What we don't do
We don't sell your personal data. Ever.
Cookies
If you sign in, we set a session cookie to keep you logged in. If you don't, we use a session cookie to keep you on your manage page and remember your anonymous character. No third-party ad-tracking cookies.
Hosting
The site itself runs on Vercel. See Vercel's privacy policy for how they handle infrastructure-level data like request logs.
Payments
Stripe handles all payment data — we never see or store your card number. See Stripe's privacy policy for how they handle it.