Homestake — Privacy Policy

Information We Collect

We collect the following types of information:

• Account information — Your email address, used for authentication and account management. Accounts are created and managed through Supabase Auth (email and password).
• Content URLs — URLs you submit for processing, including articles, YouTube videos, podcasts, and PDFs.
• Processed content — The structured insights (“glints”), summaries, and other outputs generated from your submitted content, as well as any highlights you save as “gold.”
• Organization data — How you organize content into collections (“mines”), your content subscriptions (for example podcast feeds or YouTube channels you follow through the app, including any X accounts you follow via Social Pan), and your in-app progress such as unlocked achievements (“gems”).
• Subscription and credit information — Your subscription tier, credit balance, and credit transaction history. Payment details are handled entirely by Stripe and are never stored on our servers.
• Substack session cookies — If you use the Homestake Helper Chrome extension to access paid Substack content, your Substack session cookie is stored encrypted on our servers for content retrieval. See the extension privacy policy for more details.
• Referral information — If you sign up through a referral or partner link, we record the code you arrived with so we can credit the referrer.
• Usage events — Basic first-party records of how you use the app (for example, which features you open), stored in our own database and used only to operate and improve the Service.
• Push notification subscriptions — If you enable browser push notifications, we store the subscription endpoint your browser gives us so we can deliver them. You can turn this off at any time in your browser or in the app.
• Feedback messages — Any feedback you submit through the app.

How We Use Your Information

• Content processing — URLs and content are processed using AI to generate structured insights for your use.
• Account management — Your email is used for authentication, password resets, and account-related communications.
• Credit tracking — We track credit usage to manage your monthly allocation based on your subscription tier.
• Service improvement — Feedback messages help us improve the platform.

What We Do NOT Do

• We do not sell your data to anyone
• We do not use third-party analytics or advertising trackers — the usage data we keep stays in our own database
• We do not share your data with third parties for advertising or marketing purposes
• We do not use tracking cookies
• We do not profile your behavior outside of providing the Service

Third-Party Services

We use the following third-party services to operate Homestake. Your data is shared with these services only as necessary to provide the Service:

• Supabase — Provides authentication (email/password login) and database storage for your account and content data. Supabase hosts our PostgreSQL database.
• Stripe — Handles payment processing for paid subscription tiers. We do not store your credit card or payment details. Stripe manages all payment information under their own privacy policy.
• Anthropic (Claude API) — Your submitted content is sent to Anthropic's Claude API for AI-powered processing. Content is processed according to Anthropic's privacy policy. Anthropic does not use API inputs to train their models.
• Transcription and retrieval providers — To turn audio and video into text, we may send the audio of content you submit to Groq (speech-to-text) or retrieve existing transcripts through Supadata. Content requests may be routed through Webshare proxy infrastructure. These providers receive the content being processed, not your account details.
• OpenAI — Text from processed content is sent to OpenAI's embeddings API to power search and related-content features. OpenAI does not use API inputs to train their models.
• twitterapi.io — If you follow X (Twitter) accounts through Social Pan, we use twitterapi.io to fetch those accounts' public posts. Only the public account handles are shared, never your identity.
• Sentry — Error monitoring. When something breaks, a technical error report (stack trace and request context) is sent to Sentry so we can fix it. Error reports are not used for advertising or profiling.
• Fly.io — Hosts our content processing worker server. Your submitted content passes through Fly.io infrastructure during processing.
• Vercel — Hosts the Homestake web application.

Content You Choose to Share

Some features let you make things public: sharing a dig, sharing a mine, or publishing a gold map link. Anything you share this way is visible to anyone with the link — including people without a Homestake account — until you unshare it. Your private digs, mines, gold, and chats are never made public unless you explicitly share them.

Cookies

Homestake uses only essential cookies required for authentication through Supabase Auth. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

Data Storage and Security

• All data is stored in a hosted PostgreSQL database managed by Supabase with row-level security policies.
• All communication between your browser and our servers occurs over HTTPS.
• Passwords are hashed and managed by Supabase Auth — we never have access to your plaintext password.
• Substack session cookies are stored encrypted on our servers.
• Payment information is handled entirely by Stripe and never touches our servers.

Data Retention

Your account data and processed content are retained for as long as your account is active. If you delete your account, your data will be permanently removed from our systems. Backups may retain data for a limited period after deletion.

Your Rights

You have the right to:

• Delete your account — You can request account deletion, which will permanently remove your data from our systems.
• Access your data — All of your processed content, saved gold, and organization structure are accessible through the app at any time.

To exercise these rights, contact us through the app or at the contact information below.

Children's Privacy

Homestake is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

Contact

Homestake is operated by Homestake Digital LLC. For questions or concerns about this privacy policy, use the contact form inside the app: open Settings → Tips & Feedback and send us a message. Messages go straight to us and we read every one. If you don't have an account yet, creating a free one is the fastest way to reach us.