Podscape Labs operates the PodBound website and controlled PodBound Field playtest. This policy explains what personal information we collect, why we use it, the service providers that process it, and how to request access, correction, or deletion.
Privacy contact: podscapelabs@gmail.com
Information we collect
Account information
- Email address, display name, internal account identifier, account role, approval status, and account timestamps.
- Authentication and essential session information used to register, verify, sign in, recover an account, and keep a session secure.
- A versioned record showing when the current playtest agreement was accepted.
Playtest information
- Submitted game identifiers, simulator build version, scores, game audit data, integrity state, submission time, and voluntary feedback.
- Your display name and a shortened account reference may appear in the private simulator watermark and internal playtest records.
Technical information
Our hosting and authentication providers may automatically process IP address, browser or device information, essential cookies, request logs, and security events needed to deliver and protect the service. PodBound does not currently use advertising trackers or sell personal information.
Why we use information
- To create and secure accounts, verify identity, recover access, and enforce account roles.
- To control access to unfinished playtest material and record required agreement acceptance.
- To run the simulator, receive reports, investigate bugs or misuse, and improve the physical PodBound tabletop game.
- To maintain security, prevent abuse, administer the service, and meet legal obligations.
- To respond to support, privacy, access, correction, and deletion requests.
We limit collection to information reasonably needed for these purposes. We do not ask for payment information, government identification, contact lists, or precise location for registration or Field access.
Service providers and transfers
We use Supabase for authentication and database services and Vercel for website hosting and delivery. These providers process information on our behalf under their own security and privacy terms. You can review the Supabase Privacy Policy and Vercel Privacy Policy. Information may be processed or stored outside Ontario or Canada and may be accessible to authorities under the laws that apply where it is processed.
We may also disclose information when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards. We do not rent or sell account or playtest information.
Cookies and browser storage
PodBound uses essential authentication and session storage needed to sign users in, protect routes, and maintain temporary playtest sessions. Blocking essential storage may prevent account or Field features from working. We do not currently use behavioural advertising cookies.
Retention
Account and profile information is retained while the account is active. Agreement records and playtest reports may be retained while they remain useful for security, recordkeeping, and game development. When an account is deleted, retained playtest reports are disconnected from the account and their structured player identity fields are removed. Voluntary notes may require manual review. When information is no longer reasonably needed, we will delete or de-identify it, subject to legal, fraud-prevention, backup, and technical requirements.
Security
Passwords are handled by Supabase Auth and are not stored as plain text in the PodBound application database. We use server-side authorization checks, restricted administrator routes, row-level database security, private service credentials, and access logging appropriate to the current test. No online service can guarantee absolute security.
Your choices and requests
You may update your display name and password through the account tools. You may ask what personal information we hold, request a correction, withdraw optional consent, or request account and data deletion by contacting the privacy address above. We may need to verify that you control the account before fulfilling a request.
Use the account deletion request page for instructions. If a concern is not resolved, you may have the right to contact the privacy regulator that applies to your location.
Children
PodBound account and Field access are not directed to children who cannot legally provide the required consent in their location. A parent or guardian should contact us before a minor participates if consent is required.
Policy changes
We may update this policy as the test and platform change. The current version and effective date will remain posted here. Material changes may also be shown near registration or Field access.