Privacy Policy
Draft, pending legal review (Q6)
The short version
Your account and everything you add to Spheres are stored in London, UK. Some of our providers keep limited data elsewhere in the EU, such as the sign-in emails we send, server error reports and logs. Some also process limited technical data, such as your IP address and request logs, outside the UK and EU under standard contractual clauses. We name each one below.
What we collect
- Your email address.
- Your name.
- What you add as Spheres grows, such as plans, replies and comments.
- A scrambled (hashed) form of your email address, used only to check sign-in codes and limit how many we send. We delete it about an hour after your last code.
- First-party records, such as "signed up", with no personal details in them.
- Server error reports, with personal data removed.
Why
To sign you in and run Spheres, and nothing else.
Who processes it
These providers handle data for us. Where something sits outside the UK or EU, we say so.
| Provider | What it does | Where it's stored | Anything outside the UK or EU |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | London, UK. Logs are stored in the EU. | Some account, support and usage data can be processed outside the UK and EU, under standard contractual clauses. |
| Vercel | Hosts the app, which runs in London | London, UK | Requests pass through Vercel's worldwide edge network, and Vercel says its main processing facilities are in the United States, so technical data such as IP addresses and request logs may be processed there, under standard contractual clauses. |
| Mailjet, Sinch group | Sends your sign-in code and emails about your moments | Germany and Belgium | Its support and billing providers can handle limited technical and contact data in the USA. |
| Sentry | Records server errors, with personal data removed | Frankfurt, Germany | Our team's Sentry account details are stored in the US. Your data is not. |
| Your email provider | Holds the code emails you receive | Wherever it runs | Outside our control. |
Cookies
We use the cookies we need to sign you in, and one cookie that remembers a choice you make on the sign-up screens and the invite page. We use no analytics or tracking cookies.
- sb-... (Supabase session cookies). Keep you signed in on this device.
- sp_signin. Remembers your email address and when we sent the code, only on the sign-in pages, for 30 minutes.
- sp_guest. Remembers your email address and when we sent the code, only on moment links, for 30 minutes.
Preference cookie
We set it only when you press Pause on the sign-up screens or the invite page. It holds no information about you, and pressing Play removes it.
- sp_bg. Remembers that you paused the moving background on the sign-up screens and the invite page, on this device, for up to a year. Press Play to remove it.
Selling your data
We never sell your data.
Deleting your account
Delete account arrives in Settings before Spheres opens to everyone. Until then, email hello@spheres-app.com and we will delete your account by hand.
Contact
Questions about your data? Email hello@spheres-app.com.