Privacy Policy.

Data we collect

• Account: email, display name, password (via Supabase Auth).
• Content: products, updates, comments, votes, reports.
• Second Look: the change you ask for, the maker you asked, and your solved or not-yet verdict. Public pages show counts only.
• Preferences: email opt-ins for updates and digests.
• Operational: rate-limit keys and error reports. Error reports sent to Sentry include the error message and stack trace, the page or API route involved, and technical details such as browser and device type. We do not record session replays, and we do not attach your name, email, or account ID to error reports.

How we use it

Authentication, publishing and moderating products, submission status emails, abuse prevention, error monitoring, and product improvement. We do not sell personal data.

Subprocessors

Supabase (auth, database, storage). Vercel (hosting). Upstash (rate limits). Resend (transactional email). Sentry (error monitoring and sampled performance traces; session replay is disabled and account identifiers are not attached). Each processes data only to provide its service.

Retention and deletion

Content lives while your account is active. Email us at discoveryloop.hq@outlook.com with “Delete my account” from your account email — no sign-in required, so this works even if you are locked out. We confirm within 14 days and delete account, profile, and content within 30 days. Moderation audit rows persist up to 12 months. Backups expire on rotation.

Your rights

Access, correct, export, or restrict your data by emailing discoveryloop.hq@outlook.com — no sign-in required. You can also use the feedback page while signed in. Update your profile and email preferences in-app any time.

Cookies

Supabase auth cookies (required). No advertising cookies.