Privacy policy
Last updated: October 7, 2026
Who we are
Celebeasts ("we", "us") is the data controller for the personal data described here. Questions? Write to contact@celebeasts.app.
What we collect
- Account data: when you sign in with Google, we receive your email address, name and profile photo from your Google account. We never see your Google password.
- Profile data: your username, display name, optional photo, country and optional city.
- Game data: the Celebeasts you create (their design), the links you share, and every time a Celebeast is passed, caught or given back, including the date and the country and city on your profile at that moment.
- Technical data: IP address, browser and device information in server logs kept by our hosting providers for security and reliability.
We don't collect payment data, precise location, contacts or anything from your phone.
What is public
Celebeasts is a social game. Your username, display name, photo, country and city, the Celebeasts you've met and each Celebeast's fan list (who had it, where and when) are visible to anyone, including people without an account and people who open a shared link. Your email is never shown.
How we use it and why
- To run the game and your account: sign-in, profile, creating and passing Celebeasts (performance of our contract with you).
- To keep the service safe: preventing abuse and fixing bugs (our legitimate interest).
We don't sell your data, show ads or use it to build advertising profiles.
Who processes it for us
- Supabase (database, authentication and file storage), servers in the European Union.
- Google (sign-in with your Google account), under Google's own privacy policy.
- Vercel (website hosting and delivery), with servers worldwide.
These providers act on our instructions under data processing agreements. Some may process data outside your country; when that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
We keep your data while your account exists. When you delete your account (Settings → Delete account), we delete your email and sessions, remove your name, photo and city, and replace your username with an anonymous one. The anonymous entry stays on Celebeasts' fan lists so other players' history isn't broken. Server logs are kept for a limited time by our providers.
Your rights
Depending on where you live (for example under the GDPR in the EU/UK or the LGPD in Brazil), you can access, correct, export or delete your data, object to or restrict some processing, and withdraw consent. You can edit your profile and delete your account yourself in Settings. For anything else, email contact@celebeasts.app. You can also complain to your data protection authority (for example the ANPD in Brazil).
Children
Celebeasts is not meant for children under 13. If the law where you live sets a higher age for using online services without parental consent (for example 16 in some EU countries), that age applies.
Changes
If we change this policy, we'll update the date at the top and, for important changes, let you know in the app.