Privacy Policy
Draft. This page is a plain-English draft, not legal advice, and has not been reviewed by a lawyer. Review it before launch.
Last updated: November 3, 2026.
What we collect
- Account details: your email address, your username, how you sign in (password or Google), and when you joined.
- Your password is never stored by us. Our sign-in provider keeps it in scrambled (hashed) form.
- Google sign-in: if you use it, Google tells us your email address and, for display, your profile picture. We do not get your Google password.
- Later features: when bookmarks, lists and visited places launch, the places you save will be stored with your account.
- Visit statistics: we use Cloudflare Web Analytics to count visits. It does not use cookies or track you across sites.
How we use it
To run your account, let you sign in, send account emails (verification, password reset, and notices about changes to your account), and understand how the site is used. We do not sell your data and we do not show ads.
Who handles it
- Supabase hosts our accounts and database and sends account emails.
- Google handles sign-in if you choose "Continue with Google".
- Cloudflare serves the site and provides visit statistics.
These companies process data for us under their own terms and privacy policies.
What stays on your device
Staying logged in uses your browser's local storage. It is needed for the account to work and is removed when you log out.
Your choices
You can change your username, email and password in Account settings, and delete your account there at any time. Deleting removes your account and username right away. Short-lived records kept by our providers, such as backups and security logs, may take a little longer to clear.
Children
TableOne is not meant for children under 13, and we do not knowingly create accounts for them.
Changes
If we change this policy in a significant way, we will say so on the site.