Alpha
Privacy notice
This notice covers the closed Tableround alpha hosted on OVHcloud. It is not a full production privacy policy and will be replaced before a wider beta.
What we collect
- Hosts: name, email and provider identity from Google, Microsoft or Apple via Supabase Auth, plus quizzes, venues, events and session results you create.
- Players: display names, team names and answers for a live round. Players do not create accounts. Device credentials are stored as HttpOnly cookies and hashed server-side.
- Displays: a bearer token in the display URL, used only to show the shared room screen.
- Technical logs: request metadata and errors. Secrets, credentials, OAuth codes and unrevealed answers are not intended to appear in logs.
Where data lives
Application data for this alpha is stored on an OVHcloud VPS in Europe. Authentication is provided by Supabase Auth. Encrypted backups may be stored off-server under operator control.
Retention
Abandoned test sessions and host data are removed on request during the alpha, and may be cleared when the alpha ends. Daily encrypted backups are retained for at least 14 days during the alpha window.
Contact
For access, deletion or alpha support, email alpha-support@tableround.app. Player devices can also use Forget this device in Tableround.