Privacy Policy
Last updated: November 4, 2026
1. Overview
Ameboo ("we", "our", or "us") is an anonymous real-time chat platform. This Privacy Policy explains how we collect, use, and protect information when you use our service at ameboo.app. By using Ameboo, you agree to the practices described here.
2. Information We Collect
Session Owners (registered users)
When you sign up or log in, we collect:
- Your email address (via magic link or Google OAuth)
- Your Google account profile information (name, profile picture) — only when signing in with Google
- Session data you create: session names, prompts, and messages you send as an owner
- Your notification choices: if you turn on notifications, your browser's push subscription, and whether you want email alerts
Anonymous Senders (no account required)
We assign a random emoji and code identity (e.g. 🦊 Anon #4821), tied to a random ID stored in your browser. A signed browser cookie remembers your 18+ confirmation and keeps your identity stable if local storage changes. It lasts up to 180 days. We do not ask for your name or email, and the session owner never sees who you are. To stop spam, we use a scrambled (hashed) form of your IP address to limit how many messages can be sent; we don't store the address itself.
Usage Data
We use PostHog to understand how Ameboo is used: page views and actions such as creating a link or sending a message. We never record message content, and PostHog is set not to store your IP address. When something breaks, Sentry receives an error report (the page, browser and technical details), without your IP address, cookies or messages. We do not use advertising trackers.
3. How We Use Your Information
- To authenticate you and manage your account
- To create and manage your sessions and messages
- To send you authentication emails (sign-in codes and magic links), and new-message emails only if you opt in
- To improve and maintain the Ameboo platform
- To comply with legal obligations
We do not sell your data to third parties. We do not use your data for advertising purposes.
4. Google OAuth
When you sign in with Google, we receive your Google account email and public profile information (name, profile picture) via Google's OAuth 2.0 API. We use this data only to authenticate you and populate your account profile. We do not request access to your Google contacts, Gmail, Drive, or any other Google services. You can revoke Ameboo's access to your Google account at any time via Google Account Permissions.
5. Data Retention
Sessions stop accepting new messages when they expire, but session records and associated messages may be retained so session owners can revisit past conversations. Your account information is retained until you delete your account. Anonymous sender identities are session-scoped and retained only as needed to keep the conversation history understandable. Deleting your account in Settings permanently removes your profile, your sessions and every message in them. Payment records (amount, date, the payment provider's reference and the email used to pay) are kept for accounting and refunds. They're no longer linked to an account in Ameboo, but they still identify the payment.
6. Data Security
We use Supabase for data storage and authentication, which employs industry-standard security measures including encryption at rest and in transit. Access to your data is controlled by Row-Level Security policies. No security system is perfect — please do not share sensitive personal or financial information throughAmeboo.
7. Third-Party Services
Ameboo uses the following third-party services:
- Supabase — database, authentication, and realtime infrastructure
- Google OAuth — optional sign-in method
- Vercel — hosting and deployment
- PostHog — product analytics (page views and actions such as creating or sharing a link; never message content)
- Sentry — error reports, so we can fix what breaks
- Resend — sign-in codes and notification emails
- Paystack and Polar — payments (we never see or store card details)
Each of these services has their own privacy policies which govern their use of your data.
8. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Delete your account and its data yourself, in Settings under "Danger zone"
- Withdraw consent for Google OAuth at any time
To exercise any of these rights, email us at support@ameboo.app.
9. Children's Privacy
Ameboo is only for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 is using Ameboo, please contact us and we will remove their account and content.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via a prominent notice on our platform. Continued use of Ameboo after changes constitutes acceptance of the updated policy.
11. Contact
Questions about this policy? Reach us at support@ameboo.app.