Privacy Policy.

Data we collect

• Account: email, display name, password (via Supabase Auth).
• Content: products, updates, comments, votes, reports.
• Preferences: email opt-ins for updates and digests.
• Operational: rate-limit keys and error logs.

How we use it

Authentication, publishing and moderating products, submission status emails, abuse prevention, error monitoring, and product improvement. We do not sell personal data.

Subprocessors

Supabase (auth, database, storage). Vercel (hosting). Upstash (rate limits). Resend (transactional email). Sentry (error monitoring). Each processes data only to provide its service.

Retention and deletion

Content lives while your account is active. Email us at support@discoveryloop.example with “Delete my account” from your account email. We confirm within 14 days and delete account, profile, and content within 30 days. Moderation audit rows persist up to 12 months. Backups expire on rotation.

Your rights

Access, correct, export, or restrict your data by emailing support@discoveryloop.example. Update your profile and email preferences in-app any time.

Cookies

Supabase auth cookies (required). No advertising cookies.