HOMEBASE.BIO
Privacy Policy
Effective 2026-09-07
This notice explains how homebase.bio handles personal information when you use our website, create a page, or contact us. It also describes the choices available to page visitors and account holders.
Information we receive
- Account information: your email, name, authentication identifiers, and information you choose to add. Supabase processes password authentication; we do not need to see your password.
- Social sign-in: Google or Apple supplies the identity information you authorize, such as your email and name. Apple may supply a private relay email.
- Published content: your username, profile information, images, and links. Published pages can be seen, shared, indexed, and copied by others. Private drafts are intended for authorized account access.
- Billing: if a paid subscription is available and you purchase it, Stripe processes payment details. We handle customer and subscription identifiers, plan status, and billing-related records. We do not store your full card number or security code.
- Support and privacy requests: your contact information, request details, status, and correspondence.
- Technical information: hosting and authentication providers process network and security information such as IP addresses, browser details, and request logs. Our abuse controls use hashed identifiers. Optional website analytics is off unless you enable it.
Why we use information
We use account and page information to provide the service you request; billing information to administer a subscription; and limited technical information to operate, troubleshoot, prevent abuse, and protect the service. We use support information to respond to you and maintain request records. Where a lawful basis is required, these purposes rely on performing our agreement with you, applicable legal obligations, and our legitimate interests in maintaining a secure service. Optional analytics relies on your choice and can be withdrawn.
Providers and disclosures
Supabase provides authentication and database services. Vercel hosts the website and provides optional website analytics. Google and Apple process their respective sign-in services. Stripe processes payments when used. Support correspondence is handled through our support email provider. These providers process information under their applicable agreements. We may disclose information when required by law, to address fraud or security incidents, or with your instruction. We do not sell personal information.
Public pages and external services
Opening a link or an externally hosted image may send your IP address and browser information to its provider. That provider's privacy practices apply. Page owners are responsible for the lawfulness of the content and third-party services they choose. Do not publish information you intend to keep private.
Where information is processed
The application database is hosted in the United States. Hosting, authentication, sign-in, payment, and support providers may process information in other countries. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant provider arrangement. Contact us for information about a specific transfer or provider.
Retention
We retain account information and owned content while needed to provide your account, until an account deletion request is completed, or while needed to resolve a security, legal, or billing obligation. Application event records are scheduled for removal after 90 days; abuse-limit records after two days; processed webhook identifiers after 90 days; and completed privacy request records after 90 days. Providers may retain their own operational logs and backups under their policies. Billing records may need to be retained for applicable accounting or legal obligations. Removing a public page cannot remove copies already held by search engines or other people.
Your rights and choices
You can edit your page information, unpublish your page, download owned account/workspace data, and submit access, correction, objection, or deletion requests in account settings. You can also contact us by email, including if you cannot access your account. We may need to verify your identity before disclosing or changing information. Depending on your location, you may have rights to access, correct, erase, restrict, object to processing, or receive portable data. You may complain to the data protection authority responsible for your location. We will respond within applicable legal deadlines.
Cookies, storage, and analytics
Authentication uses essential browser storage. Homebase records aggregate views and call-to-action clicks on public campaign pages so a page owner can report whether a campaign worked. Those events do not require a persistent browser identifier. Optional analytics remains off until you enable it. When enabled, a random browser identifier helps page owners measure return visits, source and UTM campaign performance; it is not derived from your email or account identity. A page owner may also connect Google Analytics or Meta Pixel. Those providers receive page-view and link-click events only after you enable optional analytics, and their own notices apply. Optional website analytics excludes private account routes and URL query parameters. You can change your choice at any time on our cookies and preferences page.
Children and changes
Account creation is intended for people aged 18 or older. Contact us if you believe a child has provided account information. We may update this notice when our practices change. Material changes will be identified in the service or communicated where required.
Contact
Contact the homebase.bio operator at hesh.here@gmail.com. For an existing account, you can also submit a tracked privacy request in account settings.