▌ Legal
Privacy
Last updated .
What we collect
- Email address — required for magic-link sign-in. Stored in Supabase Auth (project region: US-East). Used only to send sign-in links and to identify your account.
- Request metadata — IP address, user agent, and timestamp on every page load. Collected and retained by Vercel (our hosting provider) per their privacy policy. We do not query or store these logs ourselves.
- Account state — admin flag, subscription tier, favorites (when added), and tips you submit (when premium tier ships). Stored in the same Supabase project. Subject to row-level security: only you can read or modify your own rows.
What we don't collect
- No third-party analytics, tag managers, or tracking pixels.
- No advertising network identifiers.
- No social-network embeds that load tracking scripts.
- No passwords (sign-in is magic-link only).
Cookies
We use one set of cookies: the Supabase session cookies that keep you signed in. They are first-party, HTTP-only, and not used for tracking. Clearing your browser cookies signs you out.
Transactional email (magic-link sign-in) is sent through Resend from noreply@gamesharklabs.dev. We do not send marketing email without explicit opt-in.
Your rights
You can request a copy of your account data, correction of stored fields, or full deletion of your account at any time. Email privacy@gamesharklabs.dev. We aim to respond within 7 days.
Children
SharkVault is intended for users 13 and older. We do not knowingly collect data from anyone under 13.
Changes
Material changes to this policy will update the date at the top and are announced in the SharkVault changelog. Continued use of SharkVault after a change constitutes acceptance.
Contact
GameShark Labs LLC · Towson, MD · privacy@gamesharklabs.dev