Privacy Policy

1. Information We Collect

When you use FANBOXT, we may collect:

• Account information — email address, username, display name, and profile photo when you sign up
• User-generated content — game logs, reviews, ratings, lists, and profile data you create
• Usage data — pages visited, features used, and interaction patterns (via PostHog analytics)
• Device information — push notification tokens if you opt in to notifications

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Display your public profile, reviews, and lists to other users
• Send push notifications you have opted into
• Generate personalized recommendations (e.g., "For You" suggestions)
• Analyze usage patterns to improve performance and features
• Enforce our Terms of Service and prevent abuse

3. Information Sharing

We do not sell your personal information. We may share data with:

• Service providers — Supabase (authentication & storage), Vercel (hosting), PostHog (analytics), Resend (transactional email)
• Public display — your username, profile, reviews, and lists are publicly visible by default
• Legal requirements — if required by law, subpoena, or legal process

4. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on Supabase with encryption at rest. Authentication is handled via Supabase Auth with secure, httpOnly session cookies. We implement rate limiting, input validation, and content security policies to protect against common web vulnerabilities.

5. Third-Party Analytics

We use PostHog for product analytics and Vercel Analytics for performance monitoring. These services collect anonymized usage data. No personal information is shared with advertising networks.

6. Your Rights

You can:

• Access your data through your profile and account settings
• Update your profile information at any time
• Delete your account and all associated data from your account settings
• Export your data by contacting us

7. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used to understand how the Service is used. No third-party advertising cookies are used.

8. Children's Privacy

FANBOXT is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the Service or email.

10. Contact

Privacy questions? Reach out at privacy@fanboxt.com.