Privacy Policy

Last updated: June 28, 2026

Plain-English summary: We collect your Google account info when you sign in, store your votes and content in our database, and use basic analytics to understand traffic. We do not sell your data. We do not run ads. Read below for the full picture.

1. Who We Are

Takes ("we," "us," or "our") is an independent crowd-opinion platform operated at takessocial.com. For privacy questions, contact us at support@takessocial.com.

2. Information We Collect

Account information (when you sign in with Google):

Your Google account email address (used to identify your account; not displayed publicly)
Your Google profile name (used as a display name suggestion only)
A unique user ID issued by our authentication provider (Supabase)
The username you choose when joining Takes (displayed publicly)

Content you create:

Takes (questions) you post
Votes you cast (which option you chose on each take)
Comments you write
Images or videos you upload
Takes you save/bookmark
Your bio (if you add one)

Automatically collected:

Browser type, device type, and operating system (via hosting logs)
Pages visited and time spent (via anonymous analytics)
IP address (logged by our hosting provider; not stored by us directly)
Referring URL (where you came from)

Local browser storage:

Your UI preferences (theme, selected categories)
Whether you've seen the onboarding screen
Cookie consent status

3. How We Use Your Information

To operate the Service — displaying your takes, recording your votes, and showing you content
To authenticate you via Google OAuth (through Supabase Auth)
To moderate content — images and videos are scanned locally in your browser using an on-device AI model (NSFWJS). No image data is sent to any server for moderation.
To understand aggregate usage through anonymous analytics
To respond to reports, enforce our Terms of Service, and remove prohibited content
To communicate with you about your account if necessary

4. How We Store Your Data

Your account and content data is stored in Supabase, a cloud database provider. Data is stored on servers in the United States. Supabase uses industry-standard encryption in transit (TLS) and at rest.

Some preferences are also stored in your browser's localStorage for performance. Clearing your browser site data removes this local copy, but your account data in our database is unaffected.

5. Sharing of Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

Service providers: Supabase (database and authentication), Vercel (hosting and analytics). These providers process data on our behalf under their own privacy policies.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Takes, our users, or the public.
Business transfer: If Takes is acquired or merged, your data may be transferred as part of that transaction.

Public content you post (takes, comments, usernames) is visible to all users of the Service by design.

6. Data Retention

We retain your account and content data for as long as your account is active. If you delete your account, we will delete your profile and associated content. Some residual data may remain in backups for up to 30 days.

7. Your Rights

Depending on your location, you may have rights to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Object to certain processing of your data
Data portability

To exercise any of these rights, contact us at support@takessocial.com. You can also delete your account directly from Settings within the app.

8. Content Moderation & Uploaded Media

Images and videos you upload are scanned for inappropriate content locally in your browser before upload — no image data is transmitted to a server for this check. Once approved and uploaded, your media is stored in our Supabase storage bucket and is publicly accessible to other users viewing your take.

Do not upload images containing personal information of others, images you do not have rights to, or images of individuals who have not consented to being featured in a public post.

9. Cookies & Tracking

Takes uses minimal browser storage:

localStorage: Used to store your preferences and session state. Not a tracking cookie.
Authentication cookies: Set by Supabase to maintain your signed-in session.
Analytics: We may use Vercel Analytics, which collects anonymous aggregate data (page views, country-level location). No personally identifiable tracking cookies are used for analytics.

We do not use advertising cookies, cross-site tracking pixels, or third-party ad networks.

10. Third-Party Services

Supabase Privacy Policy — database and authentication
Vercel Privacy Policy — hosting and analytics
Google Privacy Policy — sign-in via Google OAuth

11. GDPR — Rights of EEA and UK Residents

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional rights apply to you under the General Data Protection Regulation (GDPR) and applicable UK data protection law:

Lawful basis for processing: We process your personal data on the basis of (a) contractual necessity — to provide you with the Service; (b) legitimate interests — to operate, secure, and improve the Service; and (c) your consent where we request it specifically.
Right to access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten"): You may request deletion of your personal data where we have no compelling reason to continue processing it.
Right to restriction: You may request that we restrict our processing of your data in certain circumstances.
Right to data portability: You may request a machine-readable copy of personal data you have provided to us.
Right to object: You may object to processing of your personal data where we rely on legitimate interests as our lawful basis.
Right to withdraw consent: Where we rely on consent to process your data, you may withdraw that consent at any time.
Right to lodge a complaint: You have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant data protection authority in your EEA country).

To exercise any of these rights, contact us at support@takessocial.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

Takes operates as a data controller for the personal data you provide. Supabase acts as a data processor on our behalf under a data processing agreement.

12. CCPA — Rights of California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information:

Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
Right to delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Right to correct: You have the right to request correction of inaccurate personal information.
Right to opt out of sale or sharing: We do not sell your personal information or share it for cross-context behavioral advertising. There is nothing to opt out of, but you are welcome to contact us to confirm this.
Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, use support@takessocial.com with the subject line "CCPA Privacy Request." We will verify your identity and respond within 45 days, with a possible 45-day extension if needed.

Categories of personal information collected: Identifiers (email, user ID, username); internet or network activity (pages visited, device type); user-generated content (takes, votes, comments, images); and inferences drawn from the above to understand user preferences.

Purposes for collection: Operating and providing the Service; authentication; content moderation; analytics; and responding to legal obligations.

We do not sell personal information to third parties.

13. Children's Privacy

Takes is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of Takes after any changes constitutes acceptance of the updated policy.

15. Contact

Questions about this policy or your data? Contact us at support@takessocial.com.