Privacy Policy

Who we are

SecretPine ("we", "us") is an indie app studio. We post apps here before they're finished, to see who's interested. This policy covers secretpine.com and every individual app's coming-soon page.

What we collect

• Your email address, if you sign up to be notified about a specific app — stored together with which app you signed up for.
• Your emoji reaction (👍, 🔥, 💜, or 👀), if you react to an app.
• Page views and clicks — which pages you visit and when, tied to an anonymous session identifier, not to your identity.
• A random session identifier stored in a cookie, used only to stop you from reacting twice or signing up twice, and to group anonymous analytics events together. It does not identify you personally.
• A hashed version of your IP address (never the raw address) combined with the date — used briefly to prevent spam and abuse of the forms on this site.

Why we collect it

• to notify you when an app you're interested in ships;
• to gauge genuine interest in upcoming apps and keep the signup forms free of spam;
• to see, in aggregate, which apps get the most traction, so we know what to build next.

What we don't do

We do not sell your data. We do not share it with advertisers or ad networks. We do not use it to build a profile of you across other apps or sites.

Who else processes this data

We use a small number of service providers to run this site. None of them may use your data for their own purposes — they only process it on our behalf:

• Supabase — hosts our database.
• Vercel — hosts this website.
• Cloudflare — manages our domain's DNS and runs a bot-detection check (Turnstile) on the email signup form.
• Upstash — powers rate-limiting to prevent abuse of our forms; it briefly sees your IP address, never your email.

Cookies

• sp_session — an anonymous, randomly generated identifier. Set on every visit, cannot be read by JavaScript on the page, and lasts up to a year. Used only for the anonymous purposes described above.
• Supabase Auth session cookies — set only if you sign in with an account. These are httpOnly and used solely to keep that session active.

How long we keep it

We keep the data described above until the app in question either ships or is archived, or sooner if you ask us to delete it.

Your rights

You can ask us to delete your email, reaction, or analytics data at any time by emailing delete-me@secretpine.com. This is an early-stage product, so deletion requests are currently handled by hand rather than through a self-serve tool — we'll act on your request promptly. If you're in the EU or UK, you have rights under the GDPR (access, correction, deletion, portability, objection). If you're a California resident, you have rights under the CCPA/CPRA; other US states (Virginia, Colorado, Connecticut, and a growing list of others) have their own, similar privacy laws — wherever you live, we'll honor the same kind of request regardless of which specific law applies to you. Contact us at the email above to exercise any of these.

Changes to this policy

We may update this page as the product changes. The "last updated" date above always reflects the most recent revision.

Contact

Questions about this policy? Email support@secretpine.com. See also our Terms of Service for the rules of using this site.