Privacy

What we collect

• Email address — required for magic-link sign-in. Stored in Supabase Auth (project region: US-East). Used only to send sign-in links and to identify your account.
• Request metadata — IP address, user agent, and timestamp on every page load. Collected and retained by Vercel (our hosting provider) per their privacy policy. We do not query or store these logs ourselves.
• Account state — admin flag, subscription tier, favorites you save, and tips you submit. Stored in the same Supabase project. Subject to row-level security: only you can read or modify your own rows.

What we don’t collect

• No third-party analytics, tag managers, or tracking pixels.
• No advertising network identifiers.
• No social-network embeds that load tracking scripts.
• No passwords (sign-in is magic-link only).

Cookies

We use one set of cookies: the Supabase session cookies that keep you signed in. They are first-party, HTTP-only, and not used for tracking. Clearing your browser cookies signs you out.

Email

Transactional email (magic-link sign-in) is sent through Resend from noreply@gamesharklabs.dev. We do not send marketing email without explicit opt-in.

Your rights

You can request a copy of your account data, correction of stored fields, or full deletion of your account at any time. Email privacy@gamesharklabs.dev. We aim to respond within 7 days.

Children

SharkVault is intended for users 13 and older. We do not knowingly collect data from anyone under 13.

Changes

Material changes to this policy will update the date at the top and are announced in the SharkVault changelog. Continued use of SharkVault after a change constitutes acceptance.

Contact

GameShark Labs LLC · Towson, MD · privacy@gamesharklabs.dev