1. Scope and contact
StreamBlock operates from Mexico. This policy describes the account sign-in experience at streamblock.io: authentication, your signed-in account page, and related support.
For questions or requests about your account data, contact admin@streamblock.io.
2. Information used for sign-in
- Email codes. When you enter an email address, Supabase processes the sign-in request and Resend delivers a six-digit verification code to that address.
- Google sign-in. If you choose Google, its sign-in flow provides your Google account identifier, email address and verification status, and available name and profile image. These identity details are stored with your Supabase account. StreamBlock requests only basic identity information for sign-in, not your Gmail messages, Drive files, or other Google service data.
- Account and session data. Supabase maintains account identifiers, connected sign-in identities, and authentication sessions. Session tokens in cookies recognize your signed-in browser. Your account page displays your email address.
- Request and security data. Authentication, email delivery, and hosting services process technical information such as IP addresses, browser or device details, request timestamps, delivery events, and sign-in errors for service operation and security.
3. How information is used and shared
We use this information to verify your identity, create or access your account, maintain your session, deliver requested sign-in codes, answer support requests, and protect and troubleshoot the service. Google identity information is used for account authentication and management.
We use the following providers to operate these features:
- Google processes authentication when you choose Google sign-in.
- Supabase handles authentication, account records, and sessions.
- Resend processes email addresses and transactional email delivery.
- Vercel hosts the application and processes hosting requests.
Information may also be disclosed when required by law or as necessary to address fraud, abuse, or security incidents. Service providers may process information in countries other than where you live.
We do not sell account data or use Google identity information for advertising. Signing in does not enroll you in marketing emails.
4. Cookies and account controls
Authentication cookies allow your browser and our server to maintain and refresh a session. Blocking or deleting them can interrupt sign-in. The Sign out button ends the session in the current browser; it does not delete the stored account or its records.
Google sign-in is optional; email codes provide another way to sign in. You can review or remove StreamBlock's Google connection in your Google Account settings. Removing that connection does not delete data already stored with your StreamBlock account.
5. Retention and your requests
We retain account information while your account is active and as needed to operate the service, address security issues, and meet legal obligations. Technical logs, email delivery records, and backups may be retained separately for these purposes.
You can request access to, correction of, or deletion of your account information by emailing admin@streamblock.io. We may need to verify that the account belongs to you before acting on a request. We handle requests according to applicable law; information needed for legal obligations or security may be retained where permitted.
6. Changes to this policy
We will publish changes on this page and update the effective date. If we change how Google account information is used, we will notify you and obtain any required consent before using it for a new purpose.