Privacy
Body Debrief · last updated 3 October 2026
Body Debrief is a private site that shows Body Debrief data to people who’ve been given access. It has no adverts and sells nothing. This page explains what happens to your details when you ask for access.
What we keep about you
- Your email address, either typed in or shared by Google if you choose “Sign in with Google”.
- Your request: which site you asked for, when, and whether it was approved.
- Sign-in codes, stored only in scrambled (hashed) form and useless once they expire.
- Your pass: a random id with its start and end date. A pass lasts 7 days.
Signing in with Google
If you use Google, it shares only your name, your email address and whether that address is verified. We use the email address and don’t keep the name. We never see your Google password and get no access to your Gmail, Drive, contacts or anything else in your account.
How it’s used
Only to email you sign-in codes, to decide whether to let you in, and to check your pass each time you visit. Your details are never sold, shared for marketing or used for anything else.
Cookies
Three cookies, all needed for sign-in: access_pass holds your pass, access_email remembers where the code went between the two sign-in steps, and access_claim lets the page know when your request is approved. There are no advertising cookies, trackers or analytics.
Who handles it
- Supabase stores the details above and runs the sign-in service.
- Resend sends the sign-in and approval emails.
- Vercel hosts the site and keeps standard server logs (such as IP addresses) for a short time.
- Google, only if you choose to sign in with it.
How long, and deleting it
Your details are kept while you have access. You can ask for a copy, a correction, or for everything to be deleted (which also ends your access) by emailing debrief@googlegroups.com.