Data Security & Infrastructure
Honest answers about where your game analytics data is stored and how we keep it secure during our beta.
We're in Beta - Here's What That Means
- • We use Supabase for secure hosting, but some advanced features aren't built yet
- • Your data is safe, but you'll need to contact us for exports or deletions
- • We're honest about our current limitations
- • Everything is free during our beta, so we're focused on core functionality first
The Simple Truth
- • We use Supabase for hosting - a trusted, secure database platform
- • Your data is encrypted and stored securely in the cloud
- • We never sell or share your game analytics data with anyone
- • You can request data export or deletion by contacting us
1. Where Your Data Lives
Supabase (PostgreSQL)
Our database and backend platform
- • Built on AWS infrastructure
- • Data centers in the United States
- • Supabase handles backups and replication
- • SOC 2 compliant hosting
What This Means
We're a small team, so we use Supabase instead of managing our own servers. This means your data benefits from enterprise-grade security without us having to build it all ourselves.
Why Supabase?
- • Trusted by thousands of companies
- • Built-in security and compliance
- • Automatic scaling and backups
- • Open source and transparent
2. How Data Gets There
Simple Data Flow
Your Game → Our API
Events sent via HTTPS from your Roblox/Godot game
API → Supabase Database
Data validated and stored securely in your isolated account
Database → Your Dashboard
You view your analytics through our web dashboard
Encrypted in Transit
- • All API calls use HTTPS
- • TLS encryption for data transfer
- • No plain text transmission
Isolated Storage
- • Your data is separate from other users
- • Row-level security in database
- • Only you can access your analytics
3. Security Measures
While we're a small team, we take security seriously and leverage industry-standard practices:
What Supabase Provides
- • Database encryption at rest
- • Automated security updates
- • DDoS protection
- • SOC 2 compliance
- • Regular security audits
What We Add
- • API key authentication
- • Data validation and sanitization
- • Account isolation
- • Basic security monitoring
Authentication & Access
Your Account
- • Email + password authentication
- • Secure session management
- • Password reset via email
API Access
- • Unique API keys per account
- • Contact us to regenerate keys
- • Basic abuse monitoring
Coming Soon
- • Self-service API key regeneration
- • Rate limiting per account
- • Enhanced security monitoring
- • Multi-factor authentication
4. Who Can Access Your Data
You Have Full Control
- • Only you can see your game analytics data
- • We never look at your specific data unless you ask for support
- • No data sharing with third parties, ever
- • You can request data export anytime
- • You can request account deletion anytime
Limited Admin Access
As a small team, we do have technical access to the database for maintenance and support. However:
- • We only access data when you specifically request support
- • We try to use the principle of least privilege
- • No regular monitoring of user data
- • We treat your data confidentially
5. Your Data Rights
Request Data Export
- • Contact us to get all your data
- • We'll provide JSON format
- • No fees or waiting periods
- • Usually processed within 48 hours
Request Account Deletion
- • Contact us to delete your account
- • All data removed within 30 days
- • No recovery after deletion
- • We'll confirm when it's done
Simple Process
Want to export or delete your data? Just contact us and we'll help you get what you need. We're building self-service options for the future, but for now, personal service works great.
6. Backups & Reliability
We rely on Supabase for data reliability, and we're honest about our current limitations:
What Supabase Handles
- • Automatic database backups
- • Server redundancy and failover
- • Infrastructure monitoring
- • Basic disaster recovery
Beta Reality
- • Occasional maintenance downtime
- • Features may change during beta
- • We'll announce major changes in advance
- • Data loss is very unlikely but possible
Honest Beta Disclaimer
We're in beta, which means stuff might break occasionally. We'll do our best to keep your data safe, but consider requesting regular exports of important analytics just in case.
Questions About Your Data?
We're a small team and happy to answer any questions about where your data goes, how it's protected, or help you export/delete your information.
We usually respond within 24-48 hours