Privacy Policy
Last updated: September 2026
This is a plain-English policy, written for how Win Win actually works today. It explains what we collect, why, and what control you have over it.
What we collect
- Name - the display name you sign up with.
- Email address - to identify your account and let you log in.
- Password - only if you sign up with email and password; stored as a secure hash, we never see or store it in plain text. If you sign up or log in with Google instead, we don't hold a password for you at all.
- Profile photo (optional) - if you choose to upload one.
- Referral links and discount codes - the ones you add for platforms you use.
- Connections - who you're linked with, formed when an invite is accepted.
- Invites - the invite codes you create and their status (active, used, revoked).
- Notification preferences - whether you've asked to be emailed when a connection shares a platform you both use, or when someone accepts your invite.
- Admin role - for the small number of accounts with administrative access to the platforms list, that this access has been granted.
Why we collect it
Only to run Win Win: to create and secure your account, to let you save your own referral links and codes, and to show them to the specific connections you've chosen to share with - never with anyone else.
How long we keep it
For as long as your account exists. If you delete your account, your profile, links, codes, and connections are deleted immediately and permanently - see "Your rights" below.
Who else sees it
Nobody, beyond the infrastructure that runs Win Win. We use Supabase to host our database, authentication, and file storage, and Vercel to host the app itself. Neither uses your data for anything other than running the service on our behalf. We don't sell your data, run ads, or use third-party analytics or tracking.
If you sign up or log in with Google, that provider shares your basic profile info (name and email) with us, as shown on its sign-in consent screen. We never see your Google password.
Cookies
We only use essential cookies to keep you logged in. No marketing or tracking cookies.
Your rights
- Download your data - get a copy of your profile, links, codes, connections, and invites from your Profile page.
- Delete your data - permanently delete your account and everything tied to it, any time, from the same page.
- Ask us anything - email us with questions about what we hold or how it's used.
Children
Win Win isn't intended for children under 16.
Changes
We may update this policy as Win Win develops. Material changes will be announced in the app.
Contact
Questions about your data or this policy? Email support@phoebecantcode.com.