Privacy Policy

Controller and scope

Ceibo operates Potrero and determines how personal data is used for the closed beta. This Policy applies to the website, account system, private lobbies, online matches, support, and related operational records. Contact: hello@ceibo.me.

Data we collect

We collect only information needed to operate, secure, and improve the beta.

• Account data: email address, authentication identifier, display name, and account timestamps. Passwords are handled by Supabase authentication and are not readable by Ceibo.
• Game data: lobby and challenge records, player identifiers, match region, scores, results, termination reason, reactions, reports, and technical simulation version.
• Technical data: IP address and information normally present in HTTP and WebSocket requests, connection status, latency, protocol errors, security events, and server logs.
• Product events: invite creation and joining, match start and completion, disconnects, reconnects, and similar account-linked beta diagnostics.
• Optional analytics: if you allow it on this device, PostHog receives pseudonymous page, solo game, neighborhood, invitation, and online-match events, plus browser exceptions. Potrero excludes names, email addresses, invitation codes, room and match identifiers, free-form text, and raw private-route URLs from these events.
• Support data: the content and address included when you contact us.

Why we process data

We use this information to create and secure accounts, connect players, operate authoritative matches, save results, restore sessions, prevent abuse, investigate failures, provide support, and understand whether the beta works reliably.

• Processing necessary to provide the service you request.
• Your consent when you create an account and accept this Policy.
• Your separate, optional analytics choice when you allow PostHog on a device. Declining does not limit the game, and you may withdraw this choice at any time.
• Ceibo's legitimate interest in protecting players, infrastructure, and the integrity of matches.
• Compliance with applicable legal obligations.

Providers and international processing

Supabase provides authentication and database services in the AWS us-west-2 region. Amazon Web Services provides the Lightsail game and web server in us-east-1. These providers process data on Ceibo's behalf under their applicable security and contractual terms.

PostHog provides optional product analytics and browser error tracking from its United States cloud only after you opt in. Session Replay is disabled, so PostHog does not receive a recording of your screen through Potrero.

Because the beta is available online and uses United States infrastructure, personal data may be processed outside your country. Ceibo takes reasonable measures to protect information during these transfers.

Cookies and local storage

Potrero uses strictly necessary browser storage for Supabase login sessions and local interface state. Disabling it may prevent account login or online play.

Optional PostHog analytics stays off until you choose Allow analytics. That choice is stored on this device and can be changed through Analytics choices. Potrero does not use advertising cookies or marketing trackers, and personal data is not sold.

Retention and deletion

Account and match information is retained while the beta account remains active and for only as long as reasonably needed for operation, security, support, dispute handling, and applicable legal requirements. Infrastructure logs are rotated according to provider operations and security needs.

Optional analytics and exception data is retained according to Ceibo's PostHog project settings and only for as long as reasonably needed to understand product use and investigate errors. Withdrawing consent stops future capture on that device; you may also contact us about existing data.

You may request deletion by emailing hello@ceibo.me from your account address. We aim to verify and complete requests within 30 days. Deleting an account may also remove shared private-match history from the other participant. Minimal records may be retained where legally necessary to protect rights or resolve abuse and security incidents.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy of your personal data. Use Analytics choices to change optional capture on this device, or email hello@ceibo.me for a rights request. We may ask for reasonable verification before acting on a request.

Security

Ceibo uses encrypted network connections, access controls, row-level database security, server-side authorization, and restricted administrative credentials. No online system can guarantee absolute security, so please use a unique password and report suspected account compromise promptly.

Adults only

Potrero is not directed to anyone under 18. We do not knowingly collect personal data from minors. If we learn that a minor created an account, we will delete it.

Policy changes and contact

Material changes will receive a new version date and require renewed acceptance before online play. Questions, rights requests, and account deletion requests may be sent to hello@ceibo.me.