Privacy Policy

Who operates DivvLaunches

DivvLaunches is operated by TODO_LEGAL_ENTITY, at TODO_BUSINESS_ADDRESS. Privacy questions can be sent to TODO_PRIVACY_EMAIL. These placeholders must be completed before production.

Information we collect

When you create an account through Google OAuth, we receive the account identifier, email address, display name, and avatar made available by the provider. Product submissions include the launch details, media, maker information, and links you choose to provide.

Voting and product activity

We record votes with the signed-in account and timestamp to enforce one vote per product and reduce manipulation. We separately record outbound product clicks, a limited referrer value when available, and a timestamp. This internal click record does not intentionally include raw IP addresses, account emails, or browser fingerprints.

Optional Google Analytics

When you allow optional analytics, DivvLaunches uses Google Analytics 4 to understand aggregate site usage, visitor trends, and traffic sources. We do not intentionally send your account email or name to Google Analytics. Analytics collection may use cookies or similar browser storage and does not load after you decline through the consent prompt.

Because this analytics is consent-based, it does not capture every visitor. You can revisit your choice using Analytics choices in the footer.

Public platform statistics

The public Control Tower may display aggregated Google Analytics results and aggregated DivvLaunches records, such as 30-day visitors, traffic-source categories, outbound product clicks, and approved launch totals. These public statistics are designed to report platform-level activity rather than identify individual visitors or accounts.

Authentication and essential storage

Supabase authentication uses cookies or browser storage needed to maintain a secure session. These essential mechanisms are separate from optional Google Analytics and remain available when analytics is declined.

Newsletter and messages

Marketing email is explicit opt-in and is not bundled with account creation. Transactional account or launch-status messages are separate. A newsletter delivery service is not yet configured.

Payments

Payment processing is not enabled in this V1. If enabled, the policy will be updated to identify the payment provider and describe the billing data it handles; full card details should not be stored by DivvLaunches.

Providers and storage

Vercel may host the application, Supabase provides authentication and database services, and Google provides OAuth and optional Analytics. Their handling of data is governed by their terms and policies. Storage region and international transfer details depend on the production configuration and are not asserted here.

Retention and security

Information is kept for as long as reasonably needed to operate the service, handle disputes, preserve legitimate public listings, and meet legal obligations. No fixed retention period is promised yet. We use access controls, server validation, and database row-level security, but no internet service can guarantee absolute security.

Your choices and rights

You may request access, correction, deletion, or export where applicable by contacting TODO_PRIVACY_EMAIL. Some records may be retained where required for security, fraud prevention, disputes, or law. You can decline optional analytics, revisit analytics preferences in the footer, and withdraw newsletter consent using its unsubscribe mechanism.

Children

DivvLaunches is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has submitted data.

Changes

We may update this policy as the product and providers change. Material changes will be posted here with a revised date and, when appropriate, communicated through the service.