Privacy Policy
Last updated: August 2026
What we collect
- Account data: When you sign up we collect your email, display name (if provided), and authentication provider (Google, GitHub, etc.).
- Usage data: Pages viewed, listings clicked, searches performed, and anonymized event counts. We use this to improve the site.
- Cookies: One session cookie for authentication (Supabase), and analytics cookies if you accept them.
What we do NOT collect
- We don't sell your data.
- We don't track you across other sites.
- We don't require real-name identity verification.
How we use your data
- To provide the service (favorites, personalization).
- To send you the newsletter — only if you explicitly subscribed.
- To respond to your contact-form messages.
- To detect abuse and protect the site.
Data retention
Account data is kept until you delete your account. Usage analytics are aggregated and anonymized after 90 days. Contact messages are kept for 2 years then deleted.
Your rights
You can:
- Access and download your data
- Delete your account at any time (email hello@bestokc.com)
- Unsubscribe from the newsletter via the link in any email
- Disable cookies in your browser
GDPR & CCPA rights
If you are in the EEA, UK, or California, you have the right to: (1) access the personal data we hold about you; (2) request correction or deletion; (3) object to or restrict processing; (4) data portability — receive your data in a machine-readable format; (5) lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@bestokc.com from the address on your account. We respond within 30 days.
We do not sell personal information. We do not share it for cross-context behavioral advertising. “Do Not Sell or Share My Personal Information” requests are honored by default.
Data portability
You can request an export of your account data — favorites, profile, and saved searches — at any time by emailing privacy@bestokc.com. We deliver a JSON archive within 14 days.
Cookies we set
| Name | Purpose | Expires |
|---|---|---|
| sb-*-auth-token | Supabase session — keeps you signed in. | 1 hour, refreshed on activity |
| __vercel | Vercel Analytics — anonymized page views. | Session |
| cookie-consent | Remembers your cookie choice. | 1 year |
Third parties
We use the following processors:
- Supabase — authentication & database (privacy policy: supabase.com/privacy)
- Vercel — hosting & analytics (vercel.com/legal/privacy-policy)
- Resend — transactional email (resend.com/legal/privacy-policy)
- Upstash — rate limiting (upstash.com/legal/privacy)
Contact
Privacy questions: privacy@bestokc.com