dima/supabase
1
0 Fork 0
mirror of https://github.com/supabase/supabase.git synced 2026-10-05 09:25:06 +03:00
Code Issues Packages Projects Releases Wiki Activity

Feat/privacy policy update (#35923)

Browse Source
This commit is contained in:
Pamela Chia authored and GitHub committed 2025-05-27 18:42:35 +08:00
1 parent 88066cec59
commit f8b3bfc4d6
7 files changed
+134 -85
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

apps/studio/components/interfaces/Account/Preferences/AnalyticsSettings.tsx
+47 -4
View File
@@ -1,9 +1,52 @@
import { Alert_Shadcn_, AlertDescription_Shadcn_, AlertTitle_Shadcn_, Badge, Toggle } from 'ui'
import { ButtonTooltip } from 'components/ui/ButtonTooltip'
import { X } from 'lucide-react'
import { toast } from 'sonner'
import { useConsentState } from 'common'
import Panel from 'components/ui/Panel'
import { useSendResetMutation } from 'data/telemetry/send-reset-mutation'
import { Toggle } from 'ui'
import { useLocalStorageQuery } from 'hooks/misc/useLocalStorage'
import { LOCAL_STORAGE_KEYS } from 'common/constants/local-storage'
export const PrivacyUpdateBanner = () => {
const [privacyUpdateAcknowledged, setPrivacyUpdateAcknowledged] = useLocalStorageQuery(
LOCAL_STORAGE_KEYS.PRIVACY_NOTICE_ACKNOWLEDGED,
false
)
if (privacyUpdateAcknowledged) return null
return (
<Alert_Shadcn_ className="mb-4 relative">
<AlertTitle_Shadcn_>
<Badge variant="default" className="mr-2">
NOTICE
</Badge>
Privacy Policy Update – Effective May 28, 2025
</AlertTitle_Shadcn_>
<AlertDescription_Shadcn_>
We’ve updated our{' '}
<a href="https://supabase.com/privacy" target="_blank" className="text hover:text-brand">
Privacy Policy
</a>{' '}
to clarify how we use AI features, marketing tools, cookies, and your data. By continuing to
use Supabase after May 28, you agree to the new terms. Questions? Contact{' '}
<a href="mailto:privacy@supabase.com" target="_blank" className="text hover:text-brand">
our team
</a>
.
</AlertDescription_Shadcn_>
<ButtonTooltip
type="text"
icon={<X />}
className="absolute top-2 right-2 px-1"
onClick={() => setPrivacyUpdateAcknowledged(true)}
tooltip={{ content: { side: 'bottom', text: 'Dismiss' } }}
/>
</Alert_Shadcn_>
)
}
export const AnalyticsSettings = () => {
const { hasAccepted, acceptAll, denyAll, categories } = useConsentState()
@@ -28,13 +71,13 @@ export const AnalyticsSettings = () => {
}
return (
<Panel title={<h5 key="panel-title">Analytics</h5>}>
<Panel title={<h5 key="panel-title">Analytics and Marketing</h5>}>
<Panel.Content>
<Toggle
checked={hasAccepted}
onChange={onToggleOptIn}
label="Opt-in to send telemetry data from the dashboard"
descriptionText="By opting into sending telemetry data, Supabase can improve the overall dashboard user experience"
label="Send telemetry data from Supabase services"
descriptionText="By opting in to sharing telemetry data, Supabase can analyze usage patterns to enhance user experience and use it for marketing and advertising purposes"
/>
</Panel.Content>
</Panel>
apps/studio/pages/org/[slug]/index.tsx
+2
View File
@@ -8,6 +8,7 @@ import { ScaffoldContainerLegacy } from 'components/layouts/Scaffold'
import { useAutoProjectsPrefetch } from 'data/projects/projects-query'
import { PROJECT_STATUS } from 'lib/constants'
import type { NextPageWithLayout } from 'types'
import { PrivacyUpdateBanner } from 'components/interfaces/Account/Preferences/AnalyticsSettings'
const ProjectsPage: NextPageWithLayout = () => {
const [search, setSearch] = useState('')
@@ -21,6 +22,7 @@ const ProjectsPage: NextPageWithLayout = () => {
return (
<ScaffoldContainerLegacy>
<div>
<PrivacyUpdateBanner />
<HomePageActions
search={search}
setSearch={setSearch}
apps/studio/pages/organizations.tsx
+2
View File
@@ -16,6 +16,7 @@ import { withAuth } from 'hooks/misc/withAuth'
import { NextPageWithLayout } from 'types'
import { Button, Skeleton } from 'ui'
import { Input } from 'ui-patterns/DataInputs/Input'
import { PrivacyUpdateBanner } from 'components/interfaces/Account/Preferences/AnalyticsSettings'
const OrganizationsPage: NextPageWithLayout = () => {
const router = useRouter()
@@ -41,6 +42,7 @@ const OrganizationsPage: NextPageWithLayout = () => {
return (
<ScaffoldContainerLegacy>
<PrivacyUpdateBanner />
<ScaffoldTitle>Your Organizations</ScaffoldTitle>
<div className="flex items-center gap-x-2 md:gap-x-3">
apps/www/pages/privacy-241009.mdx
-2
View File
@@ -13,8 +13,6 @@ export const meta = {
_Last Modified: 9 Oct 2024_
Previous Version: [4 Aug 2024](/privacy-240804)
Thank you for your interest in Supabase, Inc., ("**_Supabase_**," "**_we_**", "**_our_**" or "**_us_**"). Supabase provides a suite of open source tools, stitched together to build a seamless developer experience. This Privacy Notice explains how information about you, that directly identifies you, or that makes you identifiable ("**_personal information_**") is collected, used and disclosed by Supabase in connection with our website at [supabase.com](https://supabase.com) (the "**_Site_**") and our services offered in connection with the Site (collectively with the Site, the "**_Service_**").
## What Does This Privacy Notice Apply To?
apps/www/pages/privacy-240804.mdx → apps/www/pages/privacy-250314.mdx
+33 -34
View File
@@ -11,7 +11,7 @@ export const meta = {
# Privacy Policy
_Last Modified: 4 Aug 2024_
_Last Modified: 14 March 2025_
Thank you for your interest in Supabase, Inc., ("**_Supabase_**," "**_we_**", "**_our_**" or "**_us_**"). Supabase provides a suite of open source tools, stitched together to build a seamless developer experience. This Privacy Notice explains how information about you, that directly identifies you, or that makes you identifiable ("**_personal information_**") is collected, used and disclosed by Supabase in connection with our website at [supabase.com](https://supabase.com) (the "**_Site_**") and our services offered in connection with the Site (collectively with the Site, the "**_Service_**").
@@ -30,7 +30,7 @@ We may also provide you with additional privacy notices or disclosures where the
## Region-specific Disclosures
- **California - Your California Privacy Rights:** If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. Note we do not share your personal information with third parties for their own marketing purposes.
- **Nevada:** Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Note we do not sell your personal information within the meaning of Chapter 603A. However, if you would still like to submit such a request, please contact us at support@supabase.com.
- **Nevada:** Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Note we do not sell your personal information within the meaning of Chapter 603A. However, if you would still like to submit such a request, please contact us at privacy@supabase.com.
- **European Economic Area, United Kingdom or Switzerland:** If you are located in the European Economic Area ("**_EEA_**"), United Kingdom or Switzerland, or otherwise engage with Supabase’s European operations, please see the **[Privacy Disclosures for the European Economic Area, United Kingdom and Switzerland](#privacy-disclosures-for-the-european-economic-area-united-kingdom-and-switzerland)** for additional European-specific privacy disclosures, including the lawful bases we rely on to process your personal information, how we use cookies when you access our Sites from the EEA, UK or Switzerland and your rights in respect of your personal information.
**Note for International Visitors:** Personal information may be transferred to, stored and processed in a country other than the one in which it was collected. For example, the Sites are primarily hosted in and provided from the United States. Please note the country to which personal data is transferred may not provide the same level of protection for personal information as the country from which it was transferred.
@@ -159,12 +159,12 @@ We collect the following categories of personal information that you submit dire
(a) **Contact information**, such as first name, last name and email address
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you create an account and access the Service as an individual, we use this information to set up and authenticate your account on the Service. | The processing is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you, namely our Terms of Service. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Hubspot, Amazon Web Services, Google Cloud, Postmark,Twilio, Fly.io, and PandaDoc. |
| We use this information to communicate with you, including sending service-related communications. | The processing is necessary for the performance of a contract with you, namely our Terms of Service. | |
| We use this information to deal with enquiries and complaints made by or about you relating to the Service. | The processing is necessary for our legitimate interests, namely administering the Service, and for communicating with you effectively to respond to your queries or complaints. | |
| We use this information to send you marketing communications in accordance with your preferences. | We will only use your personal information in this way to the extent you have given us consent to do so. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you create an account and access the Service as an individual, we use this information to set up and authenticate your account on the Service. | The processing is necessary for the performance of a contract with you and to take steps prior to entering into a contract with you, namely our Terms of Service. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Hubspot, Amazon Web Services, Google Cloud, Postmark, Twilio, Fly.io, PandaDoc, Atlassian, front.com, Clazar, Hex.tech, and Clay. |
| We use this information to communicate with you, including sending service-related communications. | The processing is necessary for the performance of a contract with you, namely our Terms of Service. | |
| We use this information to deal with enquiries and complaints made by or about you relating to the Service. | The processing is necessary for our legitimate interests, namely administering the Service, and for communicating with you effectively to respond to your queries or complaints. | |
| We use this information to send you marketing communications in accordance with your preferences. | We will only use your personal information in this way to the extent you have given us consent to do so. | |
(b) **Your registration / account information**. When you create an account and access the Service as an individual, If you use an email and password to sign up to the service we will collect your email address, and password. If you use Github we use single sign-on ("**_SSO_**") such as Github to allow a user to authenticate their account using one set of login information. The data we receive is dependent on your privacy settings with the social network.
@@ -174,17 +174,17 @@ We collect the following categories of personal information that you submit dire
(c) **Payment transaction and billing information**. When you make a purchase through your own individual account on the Service, we collect information such as your billing address and Tax ID and other information such as date and time of your transaction and products / services purchased.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ---------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use this information to process your orders through the Service and collect payment. | The processing is necessary for the performance of a contract. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Tableau, PandaDoc, Hubspot, and Amazon Web Services. |
| We use this information to verify your identity in connection with the detection and prevention of fraud or financial crime. | The processing is necessary for our and third partiers' legitimate interests, namely the detection and prevention of fraud and financial crime. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ---------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use this information to process your orders through the Service and collect payment. | The processing is necessary for the performance of a contract. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Tableau, PandaDoc, Hubspot, Clay, Clazar, and Amazon Web Services. |
| We use this information to verify your identity in connection with the detection and prevention of fraud or financial crime. | The processing is necessary for our and third partiers' legitimate interests, namely the detection and prevention of fraud and financial crime. | |
(d) **Chat, comments and opinions**. When you contact us directly, e.g. by email or phone or through our feedback form we will record your comments and opinions.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you contact us about your own individual account, or contact us as a prospective customer, we use this information to address your questions, issues and concerns. | The processing is necessary for our legitimate interests, namely communicating with you and responding to queries, complaints and concerns. | We may share this information with the following service providers through the provision of the Service: Hubspot, Tableau, Google Gsuite, Notion, Amazon Web Services, and Slack. |
| We use this information to improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you contact us about your own individual account, or contact us as a prospective customer, we use this information to address your questions, issues and concerns. | The processing is necessary for our legitimate interests, namely communicating with you and responding to queries, complaints and concerns. | We may share this information with the following service providers through the provision of the Service: Hubspot, Tableau, Google Gsuite, Notion, Amazon Web Services, Slack, Clay, front.com and OpenAI. |
| We use this information to improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
(e) **Information you submit through our Supabase AI tool**. When you submit a query through our Supabase AI tool, we will collect the content of your query and information about the databases and other content you manage through the Service. We will only collect information about the structure of your databases and metadata, such as column and row headings or other information about how that content is organized. We will not access the content of the databases itself or the information you manage through the Service.
@@ -206,25 +206,25 @@ We also automatically collect the following personal information about how you a
(a) **Approximate Location information**. When you visit our Service, we may collect information about your location. This information may be derived from WiFi positioning or your IP address.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use information to present the Service to you on your device, including localizing features of the Service. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Sentry, Tableau, Mixpanel, Plausible, BigQuery (Google Cloud), Fly.io, Vercel, Cloudflare, Configcat, and Amazon Web Services. |
| We use this information to determine content that may be of interest to you. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use information to present the Service to you on your device, including localizing features of the Service. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Sentry, Tableau, Posthog, Plausible, Google LLC, Fly.io, Vercel, Cloudflare, Configcat, Stape.io, Hex.tech, and Amazon Web Services. |
| We use this information to determine content that may be of interest to you. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
(b) **Information about how you access and use the Service**. For example, how frequently you access the Service, the time you access the Service and how long you use it for, the approximate location that you access the Service from, the site from which you came and the site to which you are going when you leave our website, the website pages you visit, the links you click, whether you access the Service from multiple devices, and other actions you take on the Service.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Mixpanel, Plausible, Fly.io, Sentry, Hubspot, BigQuery (Google Cloud), Vercel, and Amazon Web Services. |
| We use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Posthog, Plausible, Fly.io, Sentry, Hubspot, Google LLC, Vercel, Hex.tech, and Amazon Web Services. |
| We use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
(c) **Log files and information about your device**. We also collect information about the tablet, smartphone or other electronic device you use to connect to the Service. This information can include details about the operating systems, browsers and applications connected to the Service through the device and your IP address.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Mixpanel, Plausible, Hubspot, Fly.io, Vercel, Sentry, Google Cloud, and Amazon Web Services. |
| We use this information to identify and detect multiple attempts to access the Service to detect fraudulent use of the Service, attempts to breach the security of the Service and to ensure that the Service does not get overloaded. | The processing is necessary for our legitimate interests, namely maintaining the security and integrity of the Service. | |
| We use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Posthog, Plausible, Hubspot, Fly.io, Vercel, Sentry, Google LLC, Hex.tech, and Amazon Web Services. |
| We use this information to identify and detect multiple attempts to access the Service to detect fraudulent use of the Service, attempts to breach the security of the Service and to ensure that the Service does not get overloaded. | The processing is necessary for our legitimate interests, namely maintaining the security and integrity of the Service. | |
| We use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
We may link or combine the personal information we collect about you and the information we collect automatically.
@@ -321,8 +321,11 @@ We use the following types of cookies:
| Cloudflare | Strictly necessary | When you first access the Site. | End of Session | Manage traffic to our Service to ensure that it does not get overloaded. | [Cloudflare Cookies](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) |
| Youtube | Strictly necessary | When you view a Youtube embedded video on our Site. | End of Session | To display embedded videos to you on our Site. | [Google Cookie Policy](https://policies.google.com/technologies/cookies) |
| hCaptcha | Strictly necessary | When you respond to a CAPTCHA to prove you are not a robot. | End of Session | To record your responses to the CAPTCHA and grant you access to certain areas of the Service. | [hCaptcha Privacy Policy](https://www.hcaptcha.com/privacy) |
| Posthog | Analytics | When you access the Service. | 1 year | To monitor and analyze how you use the Service. | [Posthog Privacy Policy](https://posthog.com/privacy) |
Cookies are pieces of code that we transfer to your computer's hard disk for record-keeping purposes. The cookies we use are required for the operation of the Service, such as cookies that enable you to log in to secure areas of the Service.
Cookies are pieces of code that we transfer to your computer's hard disk for record-keeping purposes. The cookies listed as strictly necessary are required for the operation of the Service, such as cookies that enable you to log in to secure areas of the Service.
We use Analytics cookies to collect information to assess how our Service is used. We will only do so, however, only if you give us your consent to do so. <PrivacySettings className="underline">Manage preferences</PrivacySettings>
Most browsers also allow you to change your cookie settings to block certain cookies. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. Please note that if you choose to refuse all cookies you may not be able to use the full functionality of our Service. These settings will typically be found in the "options" or "preferences" menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the "Help" option in your browser for more details.
@@ -335,10 +338,6 @@ If you would like to find out more about cookies and other similar technologies,
Please note that deleting or blocking cookies may not be effective for all types of tracking technologies, such as Local Storage Objects (LSOs) like HTML5.
#### **Cookieless analytics**
We also use cookieless technologies to collect information to assess how our Service is used. When you access a website or service on the internet, your device and your browser send certain information to the provider of that website or service in order to access that website or service. We collect, aggregate and analyze this information to identify errors in and improvements to Service. We will only do so, however, only if you give us your consent to do so. <PrivacySettings className="underline">Manage preferences</PrivacySettings>
</SectionContainer>
export default (context) => <Layout meta={meta} children={context.children} context={context} />
apps/www/pages/privacy.mdx
+49 -45
View File
@@ -11,9 +11,9 @@ export const meta = {
# Privacy Policy
_Last Modified: 14 March 2025_
_Last Modified: 28 May 2025_
Previous Version: [9 Oct 2024](/privacy-241009)
Previous Version: [14 March 2025](/privacy-250314)
Thank you for your interest in Supabase, Inc., ("**_Supabase_**," "**_we_**", "**_our_**" or "**_us_**"). Supabase provides a suite of open source tools, stitched together to build a seamless developer experience. This Privacy Notice explains how information about you, that directly identifies you, or that makes you identifiable ("**_personal information_**") is collected, used and disclosed by Supabase in connection with our website at [supabase.com](https://supabase.com) (the "**_Site_**") and our services offered in connection with the Site (collectively with the Site, the "**_Service_**").
@@ -25,13 +25,13 @@ Our Service allows customers to submit, manage or otherwise use content relating
This Privacy Notice sets out how we use personal information. It does not cover our use of information that is not "personal information", "personal information" or similar terms under applicable law. This means that it does not cover our use of aggregated or anonymized information.
Where applicable law permits, it also does not cover deidentified information, meaning information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual (please note that this would not apply to personal information collected from you if you are in the UK, EEA or Switzerland).
Where applicable law permits, it also does not cover deidentified information, meaning information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual (please note that this exception would not apply to personal information collected from you if you are in the UK, EEA or Switzerland).
We may also provide you with additional privacy notices or disclosures where the scope of the inquiry, request, or personal information we require falls outside the scope of this Privacy Notice. In that case, the additional Privacy Notice or disclosures will set out how we may process the information you provide at that time. Please note that this Privacy Notice does not cover or apply to our processing of information about our employees or contractors or applicants for positions at Supabase.
## Region-specific Disclosures
- **California - Your California Privacy Rights:** If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. Note we do not share your personal information with third parties for their own marketing purposes.
- **California - Your California Privacy Rights:** If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. We may use tracking tools to measure the performance of our advertising campaigns and help deliver personalized ads. You can manage your preferences in the <PrivacySettings className="underline">Privacy Settings</PrivacySettings>.
- **Nevada:** Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. Note we do not sell your personal information within the meaning of Chapter 603A. However, if you would still like to submit such a request, please contact us at privacy@supabase.com.
- **European Economic Area, United Kingdom or Switzerland:** If you are located in the European Economic Area ("**_EEA_**"), United Kingdom or Switzerland, or otherwise engage with Supabase’s European operations, please see the **[Privacy Disclosures for the European Economic Area, United Kingdom and Switzerland](#privacy-disclosures-for-the-european-economic-area-united-kingdom-and-switzerland)** for additional European-specific privacy disclosures, including the lawful bases we rely on to process your personal information, how we use cookies when you access our Sites from the EEA, UK or Switzerland and your rights in respect of your personal information.
@@ -59,18 +59,18 @@ We collect personal information in connection with your visits to and use of the
We collect personal information that you submit directly to us. The categories of information we collect can include:
- **_Registration information._** We collect personal and/or business information that you provide when you register for an account on the Site. This information may include your name, email address, GitHub username. We use this information to administer your account, provide you with the relevant services and information, communicate with you regarding your account, the Site and for customer support purposes.
- **_Registration information._** We collect personal and/or business information that you provide when you register for an account on the Site. This information may include your name, email address, and GitHub username. We use this information to administer your account, provide you with the relevant services and information, communicate with you regarding your account, the Site and for customer support purposes.
- **_Payment information._** If you make a purchase or payment on the Site, such as for a subscription, we collect transactional information provided in connection with your purchase or payment. Please note that we use third party payment processors, including Stripe, to process payments made to us. As such, we do not retain any personally identifiable financial information such as credit card numbers. Rather, all such information is provided directly by you to our third-party processor. The payment processor’s use of your personal information is governed by their privacy notice. To view Stripe’s privacy notice, please visit: [https://stripe.com/privacy](https://stripe.com/privacy).
- **_Communications._** If you communicate with us through any paper or electronic form, we may collect your name, email address, mailing address, phone number, or any other personal information you choose to provide to us. We use this information to investigate and respond to your inquiries, and to communicate with you, to enhance the services we offer to our users and to manage and grow our organization. If you register for our newsletters or updates, we may communicate with you by email. To unsubscribe from promotional messages, please follow the instructions within our messages and review the **[Control Over Your Information section](#3-control-over-your-information)** below. If you become a contributor, we may also collect your GitHub name and feature you on our website.
- **_Inquiries and Feedback._** If you contact us, we will collect the information that you provide us, such as your contact information and the contents of your communication with us.
You are free to choose which personal information you want to provide to us or whether you want to provide us with personal information at all. However, some information, such as your name, address, payment transaction information, and information on your requested Services may be necessary for the performance of our contractual obligations.
After registration, you may create, upload or transmit files, documents, videos, images, data or information as part of your use of the Service (collectively, “**_User Content_**”). User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Service. You have full control of the information included in the User Content.
After registration, you may create, upload or transmit files, documents, videos, images, data or information as part of your use of the Service (collectively, “**_User Content_**”). This includes any inputs you provide to our AI-powered support tools and outputs generated in response to your inputs. User Content and any information contained in the User Content, including personal information you may have included, is stored and collected as part of the Service. You have full control of the information included in the User Content.
### Information from Third Party Sources
We may receive personal information about you from our business partners and service providers and combine this information with other data we collect from you. The third-parties may include website and service operators and payment processors and marketing partners. The information may include contact information, demographic information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders and our marketing activities.
We may receive personal information about you from our business partners and service providers and combine this information with other data we collect from you. The third-parties may include website and service operators, payment processors, and marketing partners. The information may include contact information, demographic information, information about your communications and related activities, and information about your orders. We may use this information to administer and facilitate our services, your orders and our marketing activities.
- **_Single Sign-On._** We use single sign-on ("**SSO**") such as Github to allow a user to authenticate their account using one set of login information. We will have access to certain information from those third parties in accordance with the authorization procedures determined by those third parties, including, for example, your name, username, email address, language preference, and profile picture. We use this information to operate, maintain, and provide to you the features and functionality of the Service. We may also send you service-related emails or messages (e.g., account verification, purchase confirmation, customer support, changes or updates to features of the Site, technical and security notices).
- **_Social Media._** When you interact with our Site through various social media, such as when you click on the social media icon on the Site, follow us on a social media site, or post a comment to one of our pages, we may receive information from the social network such as your profile information, profile picture, user name, user ID associated with your social media account, and any other information you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network. We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages about products and services that may be of interest to you.
@@ -82,7 +82,7 @@ In addition to the uses described above, we may collect and use personal informa
- For our business activities, including to operate the Service and to provide you with the features and functionality of the Service;
- To communicate with you and respond to your requests, such as to respond to your questions, contact you about changes to the Service, and communicate about account related matters;
- For marketing and advertising purposes, such as to market to you or offer you with information and updates on our products or services we think that you may be interested in. While we may use your personal information in this manner, please note that we do not use User Content to send you ads, and we will never share User Content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose;
- For marketing and advertising purposes, such as to market to you or offer you with information and updates on our products or services we think that you may be interested in, unless you have opted not to receive such information. While we may use your personal information in this manner, please note that we do not use User Content to send you ads, and we will never share User Content with any third parties for marketing or advertising purposes, unless you have explicitly submitted it to us for that purpose;
- For analytics and research purposes;
- To enforce our **[Terms of Service](/terms)**, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
- To comply with contractual and legal obligations and requirements;
@@ -93,7 +93,7 @@ In addition to the uses described above, we may collect and use personal informa
We may share your personal information in the instances described below. For further information on your choices regarding your information, see **[Control Over Your Information](#3-control-over-your-information)**.
- We may share your personal information with third-party service providers or business partners who help us deliver or improve our Site or services, or who perform services on our behalf. These third parties _are subject to reasonable confidentiality terms and provisions restricting their use of your personal information_, and may include parties that process payments and coordinate billing, provide web hosting services, or provide analytics.
- We may share your personal information with third-party service providers or business partners who help us deliver or improve our Site or services, or who perform services on our behalf. These third parties _are subject to reasonable confidentiality terms and provisions restricting their use of your personal information_, and may include parties that process payments and coordinate billing, provide web hosting services, assist with our AI powered services, or provide analytics.
- Third parties as required by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our **[Terms of Service](/terms)** or other agreements or to protect the security or integrity of the Supabase services, including to prevent harm or financial loss, or in connection with preventing fraud or illegal activity; and/or (c) to exercise or protect the rights, property, or personal safety of Supabase, our Customers, visitors, or others.
- We may share with other companies and brands owned or controlled by Supabase, and other companies owned by or under common ownership as Supabase. These companies will use your personal information in the same way as we can under this Privacy Notice.
- We may transfer any information we collect in the event we sell or transfer all or a portion of our business or assets (including any shares in the company) or any portion or combination of our products, services, businesses and/or assets. Should such a transaction occur (whether a divestiture, merger, acquisition, bankruptcy, dissolution, reorganization, liquidation, or similar transaction or proceeding), we will use reasonable efforts to ensure that any transferred information is treated in a manner consistent with this Privacy Notice.
@@ -104,11 +104,11 @@ We may share your personal information in the instances described below. For fur
### Email Communications
From time to time, we may send you emails regarding updates to our Service, products or services, notices about our organization, or information about products/services we offer (or promotional offers from third parties) that we think may be of interest to you. If you wish to unsubscribe from such emails, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).
From time to time, we may send you emails regarding updates to our Service, products or services, notices about our organization, or information about products/services we offer (or promotional offers from third parties) that we think may be of interest to you. Our marketing emails may include tracking technologies to help us understand whether an email was opened or a link was clicked within the email. This helps us assess engagement and improve the relevance of our communications to you. If you wish to unsubscribe from such emails, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that you cannot unsubscribe from certain services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).
### Modifying Account Information
If you have an online account with us, you have the ability to modify certain information in your account (e.g., your contact information) through the account options provided on the Site. If there is personal information in your User Content, you can use the features and functionality of the Service to edit or delete the personal information or User Content. Not all personal information is maintained in a format that you can access or change. If you would like to request access to, or correction or deletion of personal information, you may send your request to us at the email provided below. We will review your request and may require you to provide additional information to identify yourself, but we do not promise that we will be able to satisfy your request.
If you have an online account with us, you have the ability to modify certain information in your account (e.g., your contact information) through the account options provided on the Site. If you have provided consent to share certain data with third-party partners in relation to our AI-powered services, you can update your preferences or withdraw your consent at any time through your account settings. If there is personal information in your User Content, you can use the features and functionality of the Service to edit or delete the personal information or User Content. Not all personal information is maintained in a format that you can access or change. If you would like to request access to, or correction or deletion of personal information, you may send your request to us at the email provided below. We will review your request and may require you to provide additional information to identify yourself, but we do not promise that we will be able to satisfy your request.
## 4. How We Use Cookies and Other Tracking Technology to Collect Information
@@ -121,7 +121,7 @@ We, and our third-party partners, use tracking technologies to automatically col
- Information about the way you access and use our services, for example, the site from which you came and the site to which you are going when you leave our services, the pages you visit, the links you click, whether you open emails or click the links contained in emails, whether you access the services from multiple devices, and other actions you take on the Site.
- We use the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom content and information; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our Site; (f) diagnose or fix technology problems; and (g) to provide, plan for, and enhance our services.
**Note we do not engage in online targeted advertising.**
We may use tracking technologies to measure the effectiveness of our advertising campaigns and to help deliver personalized ads. These tools may collect information about your interactions with our ads and websites, which can be used to analyze advertising metrics and tailor ads specifically to you. You can manage your preferences for such tracking technologies in the <PrivacySettings className="underline">Privacy Settings</PrivacySettings>.
**Cookies and Other Tracking Technologies Opt-Out.** Depending on your browser or mobile device, you may be able to set your browser to delete or notify you of cookies and other tracking technology by actively managing the settings on your browser or mobile device.
@@ -129,7 +129,7 @@ If you would prefer not to accept cookies, most browsers will allow you to: (i)
## 5. Data Retention and Security
We will retain your personal information for the length of time needed to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. We store data on servers in the U.S. or any other country in which Supabase or its affiliates, subsidiaries, agents or contractors maintain facilities. If you are located in a country where laws governing data collection and use differ from U.S. law, please note that your personal information may be transferred to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. When you register for use with Supabase you have the option of where you store your information and we will not transfer it without providing information to you in advance.
We will retain your personal information for the length of time needed to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. We store data on servers in the U.S. or any other country in which Supabase or its affiliates, subsidiaries, agents or contractors maintain facilities. Your personal information may be transferred to and stored outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. When you register for use with Supabase you have the option to select where you store your information and we will not transfer it without providing information to you in advance.
Supabase cares about the security of your information and uses commercially reasonable physical, technical and organizational measures designed to preserve the integrity and security of all information we collect. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
@@ -143,7 +143,7 @@ Our services are not intended for children under the age of 13. We do not knowin
## 8. Changes to Privacy Notice
We reserve the right to change this Privacy Notice from time to time in our sole discretion. We will notify you about material changes in the way we treat personal information by sending a notice to the primary email address specified in your Supabase account and/or by placing a prominent notice on our Site. It is your responsibility to review this Privacy Notice periodically. When we do change the Privacy Notice, we will also revise the “last modified” date.
We reserve the right to change this Privacy Notice from time to time in our sole discretion. We will notify you about material changes in the way we treat personal information in an appropriate manner, such as by sending a notice to the primary email address specified in your Supabase account, placing a prominent notice on our Site and/or other appropriate methods. It is your responsibility to review this Privacy Notice periodically. When we do change the Privacy Notice, we will also revise the “last modified” date.
## 9. Contact Us
@@ -168,7 +168,7 @@ We collect the following categories of personal information that you submit dire
| We use this information to deal with enquiries and complaints made by or about you relating to the Service. | The processing is necessary for our legitimate interests, namely administering the Service, and for communicating with you effectively to respond to your queries or complaints. | |
| We use this information to send you marketing communications in accordance with your preferences. | We will only use your personal information in this way to the extent you have given us consent to do so. | |
(b) **Your registration / account information**. When you create an account and access the Service as an individual, If you use an email and password to sign up to the service we will collect your email address, and password. If you use Github we use single sign-on ("**_SSO_**") such as Github to allow a user to authenticate their account using one set of login information. The data we receive is dependent on your privacy settings with the social network.
(b) **Your registration / account information**. When you create an account and access the Service as an individual, or if you use an email and password to sign up to the service, we will collect your email address, and password. If you use Github we offer a single sign-on ("**_SSO_**") to allow a user to authenticate their account using one set of login information. The data we receive is dependent on your privacy settings with the social network.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| -------------------------------------------------------------- | ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
@@ -176,24 +176,24 @@ We collect the following categories of personal information that you submit dire
(c) **Payment transaction and billing information**. When you make a purchase through your own individual account on the Service, we collect information such as your billing address and Tax ID and other information such as date and time of your transaction and products / services purchased.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ---------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use this information to process your orders through the Service and collect payment. | The processing is necessary for the performance of a contract. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Tableau, PandaDoc, Hubspot, Clay, Clazar, and Amazon Web Services. |
| We use this information to verify your identity in connection with the detection and prevention of fraud or financial crime. | The processing is necessary for our and third partiers' legitimate interests, namely the detection and prevention of fraud and financial crime. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ---------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| We use this information to process your orders through the Service and collect payment. | The processing is necessary for the performance of a contract. | We may share this information with the following service providers through the provision of the Service: Stripe, Orb, Tableau, PandaDoc, Hubspot, Clay, Clazar, and Amazon Web Services. |
| We use this information to verify your identity in connection with the detection and prevention of fraud or financial crime. | The processing is necessary for our and third parties' legitimate interests, namely the detection and prevention of fraud and financial crime. | |
(d) **Chat, comments and opinions**. When you contact us directly, e.g. by email or phone or through our feedback form we will record your comments and opinions.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you contact us about your own individual account, or contact us as a prospective customer, we use this information to address your questions, issues and concerns. | The processing is necessary for our legitimate interests, namely communicating with you and responding to queries, complaints and concerns. | We may share this information with the following service providers through the provision of the Service: Hubspot, Tableau, Google Gsuite, Notion, Amazon Web Services, Slack, Clay, front.com and OpenAI. |
| We use this information to improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you contact us about your own individual account, or contact us as a prospective customer, we use this information to address your questions, issues and concerns. | The processing is necessary for our legitimate interests, namely communicating with you and responding to queries, complaints and concerns. | We may share this information with the following service providers through the provision of the Service: Hubspot, Tableau, Google Gsuite, Notion, Amazon Web Services, Slack, Clay, front.com, Amazon Bedrock, and OpenAI. |
| We use this information to improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
(e) **Information you submit through our Supabase AI tool**. When you submit a query through our Supabase AI tool, we will collect the content of your query and information about the databases and other content you manage through the Service. We will only collect information about the structure of your databases and metadata, such as column and row headings or other information about how that content is organized. We will not access the content of the databases itself or the information you manage through the Service.
(e) **Information you submit through our Supabase AI tool**. When you submit a query through our Supabase AI tool, we will collect the content of your query (i.e. your inputs or prompts), and the corresponding generated output. We also collect information about the databases and other content you manage through the Service, but only the information about the structure of your databases and metadata, such as column and row headings or other information about how that content is organized. We will not access the content of the databases itself or the information you manage through the Service without your consent.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you use the Supabase AI to submit queries through your own individual account, we will use this information to generate automated responses to your query. | The processing is necessary for the performance of a contract with you, namely our Terms of Service. | We may share this information with the following service providers through the provision of the Service: OpenAI, LLC and its affiliates, Fly.io, and AWS. |
| We this information to assess the performance of the chatbot tool and improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| When you use the Supabase AI to submit queries through your own individual account, we will use this information to generate automated responses to your query. | The processing is necessary for the performance of a contract with you, namely our Terms of Service. | We may share this information with the following service providers through the provision of the Service: OpenAI, LLC and its affiliates, Amazon Bedrock, Fly.io, and AWS. |
| We use this information to assess the performance of the chatbot tool and improve the Service. | The processing is necessary for our legitimate interests (to develop and improve our service). | |
(f) **Information received from third parties, such as social networks**. If you interact with us through a social network, we may receive information from the social network such as your name, profile information, and any other information you permit the social network to share with third parties. We use single sign-on ("**_SSO_**") such as Github to allow a user to authenticate their account using one set of login information. The data we receive is dependent on your privacy settings with the social network.
@@ -213,12 +213,12 @@ We also automatically collect the following personal information about how you a
| We use information to present the Service to you on your device, including localizing features of the Service. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Sentry, Tableau, Posthog, Plausible, Google LLC, Fly.io, Vercel, Cloudflare, Configcat, Stape.io, Hex.tech, and Amazon Web Services. |
| We use this information to determine content that may be of interest to you. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
(b) **Information about how you access and use the Service**. For example, how frequently you access the Service, the time you access the Service and how long you use it for, the approximate location that you access the Service from, the site from which you came and the site to which you are going when you leave our website, the website pages you visit, the links you click, whether you access the Service from multiple devices, and other actions you take on the Service.
(b) **Information about how you access and use the Service**. For example, how frequently you access the Service, the time you access the Service and how long you use it for, the approximate location that you access the Service from, the site from which you came and the site to which you are going when you leave our website, the website pages you visit, the links you click, whether you opened a marketing email or clicked the links within the email, whether you clicked on an ad or interacted with our ads, whether you access the Service from multiple devices, and other actions you take on the Service.
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| --------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Posthog, Plausible, Fly.io, Sentry, Hubspot, Google LLC, Vercel, Hex.tech, and Amazon Web Services. |
| We use this information to monitor and improve the Service and business, resolve issues and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
| **How we may use the Personal Information** | **Legal Bases for Processing** | **Recipients of Personal Information** |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| We use information about how you use and connect to the Service to present the Service to you on your device. | The processing is necessary for performance of a contract with you, namely our Terms of Service. If you access the Service as an authorized user of another customer, the processing is necessary for our and the customer's legitimate interests, namely presenting the Service to you on your device. | We may share this information with the following service providers through the provision of the Service: Posthog, Plausible, Fly.io, Sentry, Hubspot, Google LLC, Vercel, Hex.tech, and Amazon Web Services. |
| We use this information to monitor and improve the Service and business, resolve issues, measure the effectiveness of our advertising campaigns, deliver personalized advertisements, and to inform the development of new products and services. | We will only use your personal information in this way to the extent you give us your consent to do so. | |
(c) **Log files and information about your device**. We also collect information about the tablet, smartphone or other electronic device you use to connect to the Service. This information can include details about the operating systems, browsers and applications connected to the Service through the device and your IP address.
@@ -230,7 +230,7 @@ We also automatically collect the following personal information about how you a
We may link or combine the personal information we collect about you and the information we collect automatically.
We may anonymize and aggregate any of the personal information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, improving the Service. We may also share such anonymized and aggregated information with others.
We may anonymize and aggregate any of the personal information we collect (so that it does not directly identify you). We may use anonymized information for purposes that include testing our IT systems, research, data analysis, and improving the Service. We may also share such anonymized and aggregated information with others.
### 3. How long will we store your personal information
@@ -268,7 +268,9 @@ In addition to the recipients listed above, we may also share your personal info
From time to time we may contact you with information about our services, including sending you marketing messages and asking for your feedback on our services. Most marketing messages we send will be by email. For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.
We will only send you marketing messages if you have given us your consent to do so. You can withdraw your consent at a later date by clicking on the unsubscribe link at the bottom of our marketing emails or by updating your preferences via your account on the Service.
Our marketing emails may include tracking technologies to help us understand whether an email was opened or a link was clicked within the email. We may also use tracking technologies to measure the effectiveness of our advertising campaigns and tailor ads specifically to you.
We will only use these tracking technologies if you have given us your consent to do so. You can withdraw your consent at a later date by clicking on the unsubscribe link at the bottom of our marketing emails.
### 6. Storing and Transferring your Personal Information
@@ -314,16 +316,18 @@ Due to the confidential nature of data processing we may ask you to verify your
We use the following types of cookies:
| Cookie | Type of cookie | When is the cookie dropped? | How long does the cookie stay on my device? | Purpose of the cookie | Links to respective privacy notices |
| ---------- | ------------------ | ----------------------------------------------------------- | ------------------------------------------- | --------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------- |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 30 minutes | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 1 year | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 2 years | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Cloudflare | Strictly necessary | When you first access the Site. | 30 minutes | Identify and block bots from accessing the Service. | [Cloudflare Cookies](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) |
| Cloudflare | Strictly necessary | When you first access the Site. | End of Session | Manage traffic to our Service to ensure that it does not get overloaded. | [Cloudflare Cookies](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) |
| Youtube | Strictly necessary | When you view a Youtube embedded video on our Site. | End of Session | To display embedded videos to you on our Site. | [Google Cookie Policy](https://policies.google.com/technologies/cookies) |
| hCaptcha | Strictly necessary | When you respond to a CAPTCHA to prove you are not a robot. | End of Session | To record your responses to the CAPTCHA and grant you access to certain areas of the Service. | [hCaptcha Privacy Policy](https://www.hcaptcha.com/privacy) |
| Posthog | Analytics | When you access the Service. | 1 year | To monitor and analyze how you use the Service. | [Posthog Privacy Policy](https://posthog.com/privacy) |
| Cookie | Type of cookie | When is the cookie dropped? | How long does the cookie stay on my device? | Purpose of the cookie | Links to respective privacy notices |
| ------------------ | ------------------ | -------------------------------------------------------------- | ----------------------------------------------- | --------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 30 minutes | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 1 year | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Stripe | Strictly necessary | When you access the payment interface on our Service. | 2 years | Detecting and preventing fraudulent payments and transactions. | [Stripe Cookie Settings](https://stripe.com/en-gb-sg/cookie-settings) |
| Cloudflare | Strictly necessary | When you first access the Site. | 30 minutes | Identify and block bots from accessing the Service. | [Cloudflare Cookies](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) |
| Cloudflare | Strictly necessary | When you first access the Site. | End of Session | Manage traffic to our Service to ensure that it does not get overloaded. | [Cloudflare Cookies](https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/) |
| Youtube | Strictly necessary | When you view a Youtube embedded video on our Site. | End of Session | To display embedded videos to you on our Site. | [Google Cookie Policy](https://policies.google.com/technologies/cookies) |
| hCaptcha | Strictly necessary | When you respond to a CAPTCHA to prove you are not a robot. | End of Session | To record your responses to the CAPTCHA and grant you access to certain areas of the Service. | [hCaptcha Privacy Policy](https://www.hcaptcha.com/privacy) |
| Posthog | Analytics | When you access the Service. | 1 year | To monitor and analyze how you use the Service. | [Posthog Privacy Policy](https://posthog.com/privacy) |
| Google Analytics 4 | Analytics | When you first access the Site. | 2 years (\_ga, FPID), 20 hours (\_ga\*\_, FPLC) | To measure ad campaign performance and deliver personalized ads upon consent. | [Google Analytics Privacy](https://support.google.com/analytics/answer/6004245) and [Google's use of cookies](https://policies.google.com/technologies/cookies) |
| Google Ads | Advertising | When you visit the Site after interacting with one of our ads. | 90 days | To measure ad campaign performance and deliver personalized ads upon consent. | [Google Ads Privacy](https://policies.google.com/technologies/partner-sites) |
Cookies are pieces of code that we transfer to your computer's hard disk for record-keeping purposes. The cookies listed as strictly necessary are required for the operation of the Service, such as cookies that enable you to log in to secure areas of the Service.
packages/common/constants/local-storage.ts
+1
View File
@@ -16,6 +16,7 @@ export const LOCAL_STORAGE_KEYS = {
UI_NEW_LAYOUT_PREVIEW: 'supabase-ui-new-layout-preview',
NEW_LAYOUT_NOTICE_ACKNOWLEDGED: 'new-layout-notice-acknowledge',
TABS_INTERFACE_ACKNOWLEDGED: 'tabs-interface-acknowledge',
PRIVACY_NOTICE_ACKNOWLEDGED: 'privacy-notice-acknowledged',
DASHBOARD_HISTORY: (ref: string) => `dashboard-history-${ref}`,
STORAGE_PREFERENCE: (ref: string) => `storage-explorer-${ref}`,