Privacy Policy

Last updated: April 15, 2026

OTAB ("Oh, There Oughta Be") is a public registry for things people wish existed. This page describes what information we collect, why we collect it, and the choices you have.

Information we collect

  • Account information. When you sign in with email magic link, Google, or GitHub, we receive your email address, and — for OAuth providers — your name and profile picture.
  • Profile content. Your display name, avatar, and any bio you add to your profile.
  • Activity. Suggestions you submit, votes you cast, comments you write, and associated timestamps. Physical suggestions include the coordinates and text description you provide.
  • Technical data. Approximate location derived from your IP address for features like "near me" (processed in-memory, not stored), and standard server logs.

How we use your information

  • To authenticate you and keep your session secure.
  • To display your suggestions, votes, and comments publicly, attached to your display name.
  • To improve OTAB — understanding which features are used and which are broken.
  • To contact you about your account when necessary.

Who has access

We use Supabase as our hosting and database processor, and Vercel to serve the website. These providers store data on our behalf under their own security practices. We do not sell your data, and we do not share it with advertisers.

Suggestions, votes, and comments are public by design — that's the point of the product. Your email address is never shown publicly.

Cookies and sessions

We set a small number of cookies to keep you signed in. We do not use third-party advertising or analytics trackers.

Your choices

  • Edit or delete your data. You can update your profile at any time, and delete individual suggestions or comments you've posted.
  • Delete your account. Email us at the address below and we will remove your account and associated content within a reasonable period.
  • Revoke OAuth access. If you signed in with Google or GitHub, you can revoke OTAB's access in that provider's security settings at any time.

Children

OTAB is not directed to children under 13 and we do not knowingly collect their information.

Changes

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.

Contact

Questions or requests: info@otab.world.