Privacy

When you sign in, we store your email address (or your Google / Discord account identifier, depending on which sign-in option you use) and a display name that you choose. That's the personal data side of things.

Everything else is game state: which Buggles you've collected, your glowberry balance, market activity, quest progress, and timestamps for things like crate pulls and login events. We use this to run the game (leaderboards, collection display, daily cooldowns, etc.).

Strictly to operate Buggles: keeping your account signed in, saving your collection, ranking players on the leaderboard, and rendering the public market. Usernames are visible to other players in places like the leaderboard, market listings, and chat. Email addresses are never shown publicly.

We do not sell your data, run ads, or share it with anyone outside the providers listed below.

• Supabase - database + authentication. Stores your account and game data.
• Vercel - hosts the website. Sees normal request logs (IP, browser type).
• Resend - sends magic-link sign-in emails.
• Stripe - processes payments for optional purchases. We never see or store your card details.
• Google / Discord - optional OAuth sign-in providers. Used only if you choose them; we receive your basic profile info from them.

We use a small handful of cookies to keep you signed in (Supabase auth cookies). None are used for advertising or third-party tracking. Your browser's local storage holds a couple of UI flags (e.g. onboarding completion).