Plain-language privacy notice

Last updated: 24 October 2026. This notice describes the current Ripple MVP. The operator's legal name, support contact, launch countries, and applicable legal basis must be added before public promotion.

What Ripple stores

Supabase Auth stores host email addresses, password verifiers, and authentication sessions. Ripple stores a host display name and avatar colour. Rooms store guest display names, avatar colours, game state, completion state, and private game instructions. Guest players do not create accounts.

Why

The data is used to authenticate hosts, connect devices, recover games after a restart, and run the shared game.

Retention

Rooms automatically expire after 12 hours. Account data remains until the host deletes it in Account settings. Server logs may contain request paths, status codes, timing, and a request ID; they do not intentionally log passwords or player tokens.

Service providers

Production uses Supabase in the EU for authentication and database storage, and Render in Frankfurt for application hosting and network logs. The current application does not include advertising trackers or third-party analytics.

Your choices

Hosts can sign out everywhere or permanently delete their account in Account settings. A support contact for other privacy requests must be published here before launch.