GachAha! Privacy Policy

V3 working implementation — privacy disclosure. This local revision is not yet a published store release.

GachAha! is a Chrome new tab extension that shows an interactive 3D gachapon machine for discovering curated creative content.

Data We Collect

GachAha! does not require a personal account. The extension uses anonymous Supabase authentication so it can keep basic app state working across sessions.

The extension stores an anonymous user identifier and session credential, the IANA timezone reported by the browser, the selected daily content route (Lift, Spark, or Challenge derived from your selected feeling), up to two daily draw records, cached reviewed capsule data, seen history, and kept capsules.

Optional Local Profile and Emotional History

You may save an age band and field of work or interest. Both fields are optional and editable; we do not ask for your date of birth. Profile and preferences do not yet change the server’s content selection.

Emotional history is off by default. If you explicitly enable it in Profile, this browser stores your selected feeling, the confirmed capsule reference, its timestamp, and any Better / The same / Worse feedback or optional “more like this” preference you provide. These values are not sent to a new emotional-history service. They describe your reports, not a diagnosis or proof that content changed your mood.

Local browser storage is not encrypted by this app and may be accessible to other people using the same browser profile. Turning history off stops future local recording; it does not delete earlier entries. My map offers confirmed deletion of your optional profile and emotional history. Up to 1,000 moments are retained locally; browser storage clearing or extension removal can also erase them. Persistence may be unavailable in private or restricted browsing.

The route derived from a feeling is still sent to Supabase to deliver the capsule, along with the anonymous session, timezone and previously seen capsule IDs. A route may suggest a feeling; local-history opt-in is separate from this existing delivery requirement. Deleting your local map does not delete server draw records or your kept capsule collection.

Data We Do Not Collect

GachAha! does not collect browsing history, search history, open tabs, page content from websites you visit, passwords, payment information, GPS or precise location, contacts, diagnosed health or medical data, financial data, or government identification data. The selected route is a non-clinical content preference, not a diagnosis.

How We Use Data

Data is used only to authenticate an anonymous session, enforce two turns per local day, select reviewed content for the chosen route, avoid repeats, restore the day's two capsules, remember kept capsules locally, and produce aggregate curator analytics about route usage.

Data Sharing

We do not sell personal data. Data is processed by Supabase, the hosted database provider used to operate the extension. Static assets and this policy are served through Vercel.

Data Retention

Server-side daily draw records are scheduled for deletion after 90 days. Anonymous authentication records may remain while the service is active. Cached and kept capsule data stays in the browser until the extension data is cleared or the extension is removed. Historical submissions made through V1 may remain during the compatibility period. Users can request deletion through the support URL in the Chrome Web Store listing.

Security

The extension communicates with Supabase over HTTPS. It does not request access to browser history, tabs, page content, or arbitrary websites.

Changes

This policy may be updated if the extension changes. The current policy is always available at https://capsule-3d.vercel.app/privacy.html.