Sign-in
NewsFlip uses Supabase magic links. Email addresses are used for authentication and admin allowlist checks.
Privacy note
Small data footprint, clear boundaries.
This page documents the product behavior in this launch build. It is not a substitute for legal advice, but it keeps the data model plain before the site goes live.
Gameplay
Signed-in play can store answer history, correctness, points, and streak totals so the account strip can show progress.
Reports
A content report can store the selected reason, optional note, account ID when signed in, and moderation status.
Access rules
Row Level Security is part of the launch contract.
Secret Supabase keys are server-only and are not exposed to browser code.
Public users can read published content only.
Authenticated users can submit their own answers and reports.
Admin and content-pipeline writes are restricted to server-side code paths.