Privacy Policy.

• Email + name + avatar URL — when you sign in with Google. We store these in our database to display author names on your launches/comments.
• Launches you submit — the product info you publish (name, tagline, description, URL, logo, screenshots).
• Comments and upvotes — when you post comments or upvote launches, we store who did it and when.
• Hashed IP for anonymous voting — if you upvote without signing in, we hash your IP (sha256) with a daily-rotating salt to enforce one-vote-per-IP-per-day. The raw IP is not stored. After 24 hours the hash is no longer linkable to your IP.
• Cookies — a single Supabase auth session cookie when signed in (HttpOnly, SameSite=Lax). No tracking pixels, no third-party advertising cookies.

• Your raw IP address (only the daily-rotating hash for vote dedupe).
• Your Google contacts, calendar, or anything outside basic profile.
• Browsing behavior across other websites.
• Payment info (we don’t charge for PicoLaunch).

Data is stored in Supabase (Postgres + Storage), region ap-southeast-1. Auth is Google OAuth brokered by Supabase Auth. Hosting is Vercel.

We don’t sell your data. We share with:

• Sub-processors required to run the service (Supabase, Vercel, Google for OAuth).
• Law enforcement only when legally required.

Sign in and you can edit or delete anything you posted from your Account page. You can also delete your account, which removes your profile, launches, comments, and upvotes. For data export or other GDPR/CCPA requests, email us (contact below).

One cookie: the Supabase session token (`sb-*-auth-token`). Set when you sign in. HttpOnly, SameSite=Lax, expires when the session expires or you sign out.

Questions about this policy: hello@growthhunt.ai.