TipOff privacy policy
Updated October 30, 2026.
TipOff helps fans find Bay Area watch parties and share crowd reports for the October 31 basketball game. This policy describes the information used by this website.
Accounts and Google sign-in
You can browse without an account. Planning to go creates a name-only account in Supabase. Google sign-in is used for crowd reports, adding bars and reporting wrong information. When you choose Google, we receive your Google account identifier, name, email address and basic profile information through Supabase. We use this information to sign you in, maintain your account and reduce spam. We do not receive your Google password or request access to Gmail, Drive, contacts or calendars.
What other visitors can see
Your display name and activity are public to visitors: bars you plan to go to, arrival plans and party size, crowd reports, notes and timestamps. Community bars become public after verification. Pending or rejected bar submissions and review notes are visible only to the submitter and owner; published bars include their verification information. A new Google profile uses your first name and last initial; a name-only account uses the nickname you enter. Your Google email address and authentication credentials are not displayed publicly. Avoid putting private information into a public nickname or note.
Location and place search
Near me uses your device location only after your browser asks permission. TipOff uses it in your browser to sort bars by distance and position the map; it does not store it in Supabase. Typed place searches are sent to Photon, an OpenStreetMap-based search service. Map requests to OpenFreeMap can reveal the area you are viewing. You can decline location access and browse or type a place instead.
Service providers and browser storage
Cloudflare hosts the site, Google provides Google sign-in, and Supabase provides account services, database storage and live updates. The site also loads maps from OpenFreeMap, code from jsDelivr, fonts from Google Fonts and, when configured, a Turnstile bot check from Cloudflare. Those services may process IP addresses and request metadata under their own privacy policies. Sign-in sessions, display preferences and local demo data use your browser storage. Clearing that storage can sign you out; name-only accounts cannot be recovered on another device.
Use, retention and choices
Wrong-info reports are private: we store your account ID, the affected venue, category, explanation, optional evidence link, submission time and review status. Only you and the site owner can read your report. Reports are retained until the owner removes them or handles a deletion request; deleting an account removes its account link but does not automatically delete the report text. Do not include other people’s private information.
We use account and activity data to operate TipOff, show watch-party interest and crowd conditions, and enforce access rules and rate limits. We do not sell Google user data or use it for advertising. Crowd reports stop counting as fresh after 90 minutes, but stored account and activity records are not automatically deleted at that time. They remain until removed by the operator or handled through a deletion request.
You can remove your plans and check-ins using their controls when those actions are available, sign out, or revoke TipOff's Google access in your Google Account settings. Revoking access does not by itself delete previously stored records. For account deletion or other privacy requests, contact the support email displayed on TipOff's Google sign-in consent screen and identify your TipOff account. Google information is used only for the purposes described here.
Contact and changes
The support email on the Google consent screen is the contact for this service. Changes to this policy will be published here with an updated date.