Tuesday, July 28, 2026

Privacy desk

NewsFlip

Privacy note

Small data footprint, clear boundaries.

This page documents the current product behavior. It is not a substitute for legal advice, but it keeps the data model plain for every player.

Sign-in

NewsFlip uses Supabase email/password authentication and optional magic links. Email addresses identify accounts and support secure account recovery.

Gameplay

Signed-in play can store answer history, correctness, points, and streak totals so the account strip can show progress.

Reports

A content report can store the selected reason, optional note, account ID when signed in, and moderation status.

Access rules

Row Level Security is part of the launch contract.

Secret Supabase keys are server-only and are not exposed to browser code.
Public users can read published content only.
Authenticated users can submit their own answers and reports.
Admin and content-pipeline writes are restricted to server-side code paths.
Players can permanently delete their account and associated gameplay data from account settings or the public deletion page.