We use PostHog to understand how the Download Center is used, including optional session recording. Nothing is captured until you accept. See our Privacy Policy for details.

Brave BearDownloads

Privacy Policy

Last updated July 2026

Thank you for choosing to use the Brave Bear Download Center (the "Service"), operated by Brave Bear Studios ("Company", "we", "us", "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy, or our practices with regard to your personal information, please contact us at bcurry@bravebearstudios.com.

This policy applies to all information collected through the Service: the app catalog, account creation and sign-in, invite-code redemption, subscription tiers, and app downloads.

1. Information We Collect

Account information. When you create an account, we collect the email address and password you provide through Supabase Auth, our authentication provider.

Usage and analytics information. Once you accept our cookie/analytics consent banner, we use PostHog to collect information about how you use the Service — pages visited, features used, and (where enabled) session recordings of your browser session. Nothing is captured before you accept, and you can withdraw consent at any time via "Cookie preferences" in the site footer. See "Cookies and Tracking Technologies" below.

Automatically collected information. Like most services, we automatically collect certain information when you visit or use the Service — your IP address, browser and device characteristics, operating system, and referring URLs. This information does not by itself reveal your identity and is used to maintain the security and operation of the Service.

Access and grant records. When you redeem an invite code or are granted access to an app, we record that action — who performed it, when, and which app or code was involved — in an append-only audit log used for security and SOC 2 compliance purposes.

2. How We Share Your Information

We do not sell your personal information. We share information only as necessary to operate the Service, with the following categories of service providers, each acting as a data processor on our behalf:

  • Supabase — hosts our database and handles account authentication.
  • Microsoft Azure — hosts the Service and stores downloadable app files (Azure Blob Storage).
  • Cloudflare — delivers downloads via CDN.
  • PostHog — provides consent-gated analytics and session recording.
  • Sentry — provides error monitoring to help us fix bugs.

We may also disclose information to comply with the law, protect our rights, or in connection with a merger, sale, or transfer of company assets.

3. Cookies and Tracking Technologies

We use a cookie to remember your theme preference and a separate cookie to remember your analytics consent choice. Analytics and session-recording cookies from PostHog are set only after you click "Accept" on the consent banner; clicking "Reject" (or taking no action) keeps them off. You can change your choice at any time using "Cookie preferences" in the site footer.

4. International Data Transfer

Our servers and service providers operate in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our providers operate.

5. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy. Specifically:

  • Audit log records (grants, invite-code redemptions, and account actions) are retained for 12 months and then automatically deleted.
  • PostHog analytics and session-recording data is retained for 12 months under our PostHog project's data-retention setting, and is only collected at all if you have opted in.
  • Account information is retained until you delete your account (see "Your Privacy Rights" below) or as otherwise required by law.

6. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a child under 18, we will delete it.

7. Your Privacy Rights

You can review your account information, change your password, and delete your account and associated personal data at any time from your Account page. Deleting your account permanently removes your Supabase Auth user record and your access grants, and redacts your personal identifiers from the audit log — the log entries themselves are preserved, with your identifying details replaced by an anonymized placeholder, to maintain our SOC 2 audit trail. We also make a best-effort request to delete your PostHog analytics profile.

If you are a resident of the European Economic Area and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority.

8. Do-Not-Track Signals

No uniform technology standard for recognizing Do-Not-Track ("DNT") browser signals has been finalized, so we do not currently respond to DNT signals. Analytics remain governed by the opt-in consent banner described above regardless of any DNT signal.

9. California Residents

California Civil Code Section 1798.83 ("Shine the Light") permits California residents to request, once a year and free of charge, information about the categories of personal information we have disclosed to third parties for direct marketing purposes. We do not use your personal information for direct marketing, and, as described above, do not sell your personal information. To make a request, contact us using the details below.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision, and continued use of the Service after a revised policy is posted constitutes acceptance of the changes.

11. Contact Us

Questions about this policy can be sent to bcurry@bravebearstudios.com.

Privacy Policy — Brave Bear Download Center