What Rabbithole Brain knows (very little)

Your profile lives on your device. Username, trails, badges, and titles are stored in your browser’s localStorage. Clearing site data deletes them. No password, no tracking profile, no ad network.

Cloud sync is optional and explicit. If you sign in with a magic link, your profile syncs to our database (Supabase) so it follows you across devices. We store your email only to let you log in and to help you recover your account. Row-level security means only you can read your row.

Analytics are aggregate. The prototype counts anonymous product events (trails started, Brain Trails opened, badges unlocked) in your own browser to power the product dashboard. We care which starter cards hook people — never which person clicked what. Production analytics will stay aggregate and privacy-respecting, and any public statistic from a sample smaller than 25 users gets suppressed.

Payments are currently paused. When real support payments launch they will run through a payment processor such as Stripe; Rabbithole Brain never sees or stores card details. Today, the support panel does not collect payment details, charge a card, or unlock supporter rewards.

Public trails are public. If you publish a trail, the link encodes the trail itself — title, mode, and the thoughts you chased — so anyone with the link can view and remix it. Don’t put private or sensitive information into anything you publish.