Privacy Policy
Last updated October 5, 2026.
Sideline is a sports news swipe deck. This policy describes what the apps actually collect today and where it is stored. The website is served from GitHub Pages. Accounts, social activity, and preferences are stored in Supabase.
Account
- Email address and name from Sign in with Google or Sign in with Apple, when you use those providers.
- A magic-link email address, if you sign in that way.
- An email address and password, for accounts created with one. Supabase stores only a salted hash of the password.
- Display name, username, and profile photo you choose. The photo is stored in Supabase Storage.
How you use Sideline
- Swipes: likes, passes, and saves. Signed-in swipes are stored on your account. Guest swipes stay on the device.
- Follows: when you follow someone, Sideline stores that relationship, shows follower and following counts on profiles, and can notify them that you followed them.
- Friend swipes: if your profile setting “Show my swipes to followers” is on (it defaults on), people who follow you can see your like or pass on the back of a card. You can turn that off in Settings.
- Friends notifications: alerts when someone follows you, or when someone you follow comments on a card.
- Cards you open and read.
- Comments, replies, reactions, upvotes, and @mentions.
- Preferences: sports, teams, light or dark theme, whether your profile is public, and whether activity alerts are on.
- Reports you file and accounts you block. You can read your own reports and your own block list. Other people cannot.
- The time you accept the Terms of Use and Community Guidelines.
Website visits
The website counts page visits in Supabase: the page path, the referring site’s domain (for example t.co), any utm_ campaign tags in the link, whether the browser is mobile or desktop, and a random visitor id kept in your browser’s local storage. It does not use cookies, does not store your IP address, and does not link visits to your account. The iOS app does not send these visit counts.
Not collected today
Sideline does not collect precise location, contacts, health data, or payment information. It does not use advertising identifiers. Push notification tokens are not collected. If push is added later, the token would be stored in Supabase only to deliver alerts you turned on, and this policy would be updated first.
News and AI
Card headlines, summaries, and the longer text on the back of a card are generated with xAI from public news. The ingest job reads public feeds and, when it can, the publisher’s article page. It rewrites that public text into a short card. Sideline does not sell that text. Each card names the source and links to the publisher.
Where it lives
Account data, follows, comments, reactions, swipes, saves, reads, preferences, reports, and blocks are stored in Supabase (hosted Postgres and Storage). The public card deck is a static file on GitHub Pages. Guest activity that never reaches an account stays in device storage.
Deletion
Settings includes Delete account. Confirming it permanently deletes the sign-in and the personal data listed above. Comments you wrote stay on the story as “Deleted user” so other people’s replies are not erased with your account. You can also email support and ask for the same deletion.
Contact
Questions about privacy or a deletion request: email noah@sidelinesports.ai.