GachAha! Privacy Policy

Effective date: 2026-09-14

GachAha! is a Chrome new tab extension that shows an interactive 3D gachapon machine for discovering curated creative content.

Data We Collect

GachAha! does not require a personal account. The extension uses anonymous Supabase authentication so it can keep basic app state working across sessions.

The extension stores an anonymous user identifier and session credential, the IANA timezone reported by the browser, the selected daily content route (Tired/Lift, Numb/Spark, or Motivated/Challenge), up to two daily draw records, cached reviewed capsule data, seen history, and kept capsules.

Data We Do Not Collect

GachAha! does not collect browsing history, search history, open tabs, page content from websites you visit, passwords, payment information, GPS or precise location, contacts, diagnosed health or medical data, financial data, or government identification data. The selected route is a non-clinical content preference, not a diagnosis.

How We Use Data

Data is used only to authenticate an anonymous session, enforce two turns per local day, select reviewed content for the chosen route, avoid repeats, restore the day's two capsules, remember kept capsules locally, and produce aggregate curator analytics about route usage.

Data Sharing

We do not sell personal data. Data is processed by Supabase, the hosted database provider used to operate the extension. Static assets and this policy are served through Vercel.

Data Retention

Server-side daily draw records are scheduled for deletion after 90 days. Anonymous authentication records may remain while the service is active. Cached and kept capsule data stays in the browser until the extension data is cleared or the extension is removed. Historical submissions made through V1 may remain during the compatibility period. Users can request deletion through the support URL in the Chrome Web Store listing.

Security

The extension communicates with Supabase over HTTPS. It does not request access to browser history, tabs, page content, or arbitrary websites.

Changes

This policy may be updated if the extension changes. The current policy is always available at https://capsule-3d.vercel.app/privacy.html.