Privacy Notice

01What we collect

• Account: email address, handle, stance, and the profile details you choose to add.
• Game content: the videos you record in the app for official attempts, match chat messages, and game results.
• Spots: locations, photos, and descriptions you deliberately contribute. Your device location is used only to show nearby spots and only with your permission.
• Device basics: push notification token and the technical logs needed to keep uploads and games working.
• Dashboard: if you sign in at dash.skatelabs.app, the Coinbase account ID that connects that sign-in to your Skate Labs account, and the addresses of any wallets you link.
• Access requests on this website: the form at /request-invite collects the name, email address, country, city and message you type, along with the phone you picked and the language the page was in. You do not need an account to send one, and it is the only place on this website where you hand us personal data.
• Cookies on our websites: sl_consent remembers your answer to the cookie banner for 12 months, on skatelabs.app, dash.skatelabs.app and docs.skatelabs.app. Google Analytics sets its own cookies (_ga, and _ga_ followed by a code) wherever it is allowed to; section 04 explains where. On skatelabs.app only, the ad pixels set theirs under the same rule: Meta sets _fbp and _fbc, TikTok sets _ttp, _tt_enable_cookie and ttcsid, and X sets _twclid. On the dash, sign-in cookies keep you signed in. Earlier versions of this website set sl_locale to remember your language; it no longer does. Our hosting provider keeps ordinary server logs of requests, as any web host does.

02What we do with it

We use this data to run the game: showing your attempt to your opponent, applying letters, sending turn notifications, storing history, and moderating reports. Experimental video analysis produces quality signals (such as blur or framing) that are advisory only and never decide a game.

03What we do NOT do

• We do not sell your personal data.
• We do not publish your game videos to a public feed — none exists.
• We do not show your exact location to other users without your action.
• Sensitive skate spots are displayed at reduced precision; exact coordinates stay restricted.

One thing does become public, and only because a player chooses to publish it: the result card. When a game is finished, either player can press Share result. That creates a public web page at skatelabs.app/r/ plus a long random code, showing both players’ handles, both S.K.A.T.E letter racks, who won, how many tricks were thrown and the date it finished. No video, no chat, no email address, no location. Anyone holding the link can open it without an account, and we ask search engines not to index it. Both players share one link, and the link keeps working — we cannot un-send what someone has already forwarded.

Sharing is on by default. In the app’s settings you can turn your own name off: on a card the other player publishes, you then appear as an anonymous skater instead of by your handle. It also applies to cards that were already shared, because the page is built from your current setting every time someone opens it — including the preview image that unfurls in a chat. Two limits worth knowing. It does not stop the other player from sharing the match, only from naming you. And it does not apply to a card you published yourself: publishing is you choosing to be named.

04Storage and access

Videos live in private storage. Playback links are short-lived and only issued to the participants of your game and to moderators handling a report or dispute.

These companies process data on our behalf: Supabase (the database, file storage and accounts behind the app and the dash), Cloudflare (serves our websites, keeps their request logs, and counts page views with Cloudflare Web Analytics, which uses no cookies), Coinbase (the Coinbase Developer Platform sends sign-in codes, runs Google, Apple and X sign-in, and provides the Base wallet made for you on the dash), Brevo (sends account emails, such as the welcome email and sign-in emails), Mapbox (draws the spots map in the app: it receives the map area you are looking at and, when you tap locate me, your device location; Mapbox’s own telemetry is turned off), Render (runs the automatic check that reads the quality of the clips you record, such as blur or framing), Expo (builds the app and delivers push notifications), Sentry (records crashes and errors so we can fix them), Google (Google Play testing, and Google Analytics for how our websites and the app get used), and Apple (TestFlight). On skatelabs.app we also work with three ads partners, Meta (Facebook and Instagram), TikTok and X, whose pixels measure our ads; the next paragraphs say what they see. When we add you as a tester, we put your email address on the TestFlight or Google Play testing list — which means Apple or Google receives it, and their own privacy terms apply to what they do with it.

On skatelabs.app, dash.skatelabs.app and docs.skatelabs.app, Google Analytics records the pages you open, how you arrived, how long you stay, your device and browser, and your approximate location, worked out from your IP address, which Google does not keep. It runs with Google signals: if you are signed in to a Google account that allows ad personalization, Google adds your age range, gender and interests to our reports, and we only ever see those as totals, never person by person. Google may also use this data for ads, under its own privacy policy. We do not show ads on our sites and we do not sell your data.

On skatelabs.app, and only there, we also use the Meta Pixel, the TikTok Pixel and the X Pixel. They tell us whether our ads on Facebook, Instagram, TikTok and X bring people to the site, and let us show our ads to people who have visited it. When they are on, each one tells its company which pages you open, what you tap on them and when, your device and browser, your IP address and, if you arrived from one of their ads, which ad. Meta, TikTok and X can connect this to an account you have with them, and they also use it for their own purposes, such as ads, under their own privacy policies. Pages opened from a private link (an invite code, a challenge or a result card) never load the pixels, and neither does any page of the dash or the docs.

The first time you visit, a banner asks about cookies. Accept all switches on Google Analytics cookies, Google signals and the Meta, TikTok and X pixels. Reject switches them all off and deletes the cookies they already left on your device. Your answer is kept in the sl_consent cookie for 12 months and covers all three sites; change it at any time with Cookie settings at the bottom of every page. In the EU, the EEA, the UK and Switzerland, nothing is stored, Google signals stay off and the pixels do not load unless you press Accept all; until then Google Analytics only receives cookieless signals that count the visit. To know which rule applies to you, skatelabs.app checks your country from your IP address, without storing it. Everywhere else, Google Analytics, Google signals and the pixels are on until you press Reject. Cloudflare Web Analytics uses no cookies and counts page views either way.

05Retention and deletion

Alpha data is retained while your account is active. You can delete your account from inside the app at any time — Settings, then Account, then Delete account. You retype your handle to confirm, and deletion happens immediately: your account stops working, every device is signed out, and your handle, name, bio, city, profile picture, email address, password and sign-in methods are destroyed along with your saved spots, settings, blocks and notification registrations. Your clips and photos stop playing for everyone at that moment and the stored files are then erased.

Three things survive deletion, and we would rather say so plainly than surprise you. A finished match is a record of two people, so completed games stay exactly as they were played — the same winner, the same letters, the other skater’s clips — and cannot be rewritten or removed by one player leaving. Safety reports and the moderation trail also stay, so abuse can still be investigated after an account is gone; anything attached to a report that is still open is kept until that report is closed. And invite attributions stay: if you joined through another skater’s invite code, or someone joined through yours, the record that one account brought in the other is kept, along with the date and whether it arrived as a link or a typed code. Your own invite code is deleted and stops working the moment you go — but that joining record is kept, because removing it would drop another skater’s private invite count by one and tell them it was you who left. None of the three carries your name: what remains is keyed to a random identifier that no longer points at you.

Export is not automated yet. Email support@skatelabs.app to request a copy of your data; during the alpha these requests are handled manually and confirmed to you when complete.

06Contact

Privacy questions: support@skatelabs.app.