Privacy Policy

Information we collect

When you sign in with Google or GitHub, we receive your account identifier, email address, public profile name, avatar URL, and authentication provider. We store your account identifier privately to enforce ownership and one-vote rules.

Product submissions, maker names and handles, votes, and critique text are community content and are displayed publicly. We also receive standard technical data such as request timestamps and service logs from our hosting and database providers.

To distribute discovery fairly, we count a product impression only after its card has been substantially visible for a short period. A salted one-way hash derived from limited request information is retained with the product and UTC date to prevent repeated views from being counted more than once per day. We do not store the raw IP address in the exposure table.

When an authenticated maker submits a valid two-sided Arena critique, products owned by that account may receive a temporary seven-day discovery weighting. This affects only Needs More Eyes selection; it never changes Arena queue order or match results.

How we use data

We use data to authenticate members, operate tournament brackets, prevent duplicate or abusive activity, attribute public feedback, maintain security, and improve the service. We do not sell personal information.

Storage and service providers

Authentication, database records, and uploaded product logos are processed by Supabase. The application and operational analytics are hosted by Vercel. Google or GitHub processes the OAuth sign-in you choose under its own privacy terms.

Retention and your choices

We retain public tournament history and critiques so match pages remain useful. Daily exposure deduplication records are deleted after approximately 31 days; aggregate impression counts remain so fair discovery can continue. Security counters are retained only as needed to limit abuse. You may ask for account data access or deletion; public content may be anonymized or retained where needed to preserve tournament integrity or comply with law.

Do not include secrets, private personal data, or confidential material in a product submission or critique.

Contact and updates

Privacy requests can be sent to support@maber.xyz. We may update this policy as the service changes and will revise the effective date above.