Privacy

What we collect

• Your e-mail address, to send sign-in codes and maintain one active preference per verified account in each arena battle. It is never shown publicly.
• Google sign-in, when you choose it. Google shares your account identifier, e-mail address and verification status, and basic profile information such as your name and profile picture with Supabase Auth. We use this identity to sign you in and prevent duplicate accounts; your Google profile is not published as your AppRingside profile. We do not request access to your Gmail, contacts, calendar or files, and do not use Google account data for advertising.
• Your votes and battle picks, to show the corresponding battle and Community period results. Legacy weekly supports are kept separately as history.
• What you send us: app submissions, ownership claims (including the work e-mail and evidence you give) and reports.
• Network fingerprints instead of IP addresses. We store a salted one-way hash of your network that changes every week, only to spot many accounts voting from one place. For page impressions and outbound clicks we keep a separate hash that changes every day. We do not store raw IP addresses.
• A sign-in cookie keeps you signed in on the web. The iOS and Android apps store session tokens in the device's protected storage. Signing out removes the session from that device. We do not use advertising or cross-site tracking cookies.

Who processes it

The site runs on Render (web hosting) and Supabase (database and sign-in); sign-in e-mails are delivered through Resend. They process data on our behalf. We do not sell personal data and do not share it with advertisers or sponsors. Sponsors only see totals of impressions and clicks.

Sentry receives technical error reports to help us fix failures. Our reporting removes account details, request bodies, cookies and URL query values. We do not record session replays. Google also processes sign-in requests when you choose Google sign-in.

How long we keep it

• Account data: until you delete your account.
• Arena ballots retain private per-battle fingerprints of the verified sign-in identity and e-mail to prevent duplicate voting after deletion or re-registration. These are pseudonymous abuse-prevention records, not public identities or account links. Open preferences are withdrawn on deletion; rejection and review decisions remain on the private fingerprint to prevent evasion. Finished results remain as fixed tallies. The fingerprints use a separate random key for each battle.
• Legacy supports in finished weeks: kept as anonymous counts after deletion, so published rankings stay accurate.
• Impression and click records: aggregated per day; kept for up to 13 months.
• Moderation logs: kept for as long as needed to handle appeals and abuse.

Your choices

• Delete your account at any time on your account page. Open arena preferences are withdrawn immediately. Legacy supports in the open historical week are removed; finished historical counts are anonymized.
• Account deletion also removes the associated Supabase sign-in identity and its stored Google profile data. You can separately remove AppRingside's access from your Google Account's third-party connections settings; this does not delete your AppRingside account.
• For access or correction requests, use the report form while signed in.
• You can also contact appringside@kolcu.ai.