Change record
CA-X-005145
Supabase Privacy Policy
Entity
Date detected
September 17, 2026
Severity
Low
Direction
Neutral
Changes
+3 sentences added · 3 sentences modified

Impact Summary

Generated by a model from the captured document; not read by a person
Low Neutral for users
Affected users
All users

Supabase updated its Privacy Policy to reflect a change in corporate entity from Supabase, Inc. to Supabase Pte. Ltd., which affects who is identified as the data controller. The policy also added a new entry describing Freebuff advertising cookies, which are set when users visit the site after interacting with Freebuff ads and retained for 30 days to measure ad campaign performance and attribute conversions.

Stay ahead of the changes
Track Supabase and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF

What this means for you

Generated by a model from the captured document; not read by a person

The updated Privacy Policy identifies Supabase Pte. Ltd. as the data controller instead of Supabase, Inc., which may affect jurisdiction and regulatory applicability depending on user location. The policy now discloses that Freebuff advertising cookies are placed on users' devices for 30 days when they visit the site after interacting with Freebuff ads, to measure ad campaign performance and attribute conversions to ad clicks upon consent.

Key Clauses Affected

Generated by a model from the captured document; not read by a person
Data Controller Identification

Supabase Pte. Ltd. is now identified as the data controller instead of Supabase, Inc., affecting regulatory jurisdiction and data processing agreements.

Freebuff Advertising Cookie Disclosure

Added disclosure of Freebuff advertising cookies retained for 30 days to measure ad campaign performance and attribute conversions upon consent.

Full clause-by-clause analysis available with Insight.
ⓘ

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
653160bcc2daa3f2026f276df78049fb9196b026ac7bc3f12a9b771168ab9d82
September 11, 2026 01:20 UTC
✓ Verified
Current Version
952ca47c6e0a7956a3e26b26e6095d0a88896068901fa0a4b4250c27d67dbbfd
September 17, 2026 01:19 UTC
✓ Verified
Change Detected
September 17, 2026 01:19 UTC
✓
Analysis Methodology
✓ Verified
Source Document
https://supabase.com/privacy
Record history

Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.

2026-10-07 · Change line edited · change line rewritten to the 2026-10-07 template: no detection date, no sentence counts
Previous text
Supabase updated their Supabase Privacy Policy on September 17, 2026. Change detected: 3 sentence(s) added, 3 sentence(s) modified. Document contained 320 sentences after update.
Citation Record
Entity: Supabase
Document: Supabase Privacy Policy
Record ID: CA-X-005145
Version: CA-V-007013
Captured: 2026-09-17 01:19:04 UTC
URL: https://conductatlas.com/change/2026-09-17-supabase-supabase-privacy-policy-5145/
Accessed: Nov. 1, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Generated by a model from the captured document; not read by a person
Assessment

This change reflects a corporate restructuring (entity name change from Inc. to Pte. Ltd.) and adds transparency regarding third-party advertising cookie use. The entity change may affect data controller jurisdiction and regulatory obligations under GDPR, …

🔒 Full institutional analysis

Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.

Unlock the full institutional analysis — Insight

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005145.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
Supabase Privacy Policy
Entity
Supabase
Captured
September 17, 2026
Source URL
https://supabase.com/privacy
Other changes to Supabase Privacy Policy
Previous change May 15, 2026
Supabase expanded its marketing practices and vendor disclosures in its privacy policy. The updated terms now explicitly state that the …
Low Neutral
View full version history →
More from Supabase
Oct 7, 2026 Medium
Supabase Terms of Service

Supabase revised its Terms of Service to clarify the contracting entity and expand the definition of Customer Data to include …

Jul 31, 2026 Low
Supabase Terms of Service

Supabase revised its Terms of Service with primarily formatting and clarification changes. The most substantive change adds language stating that …

May 15, 2026 Low
Supabase Privacy Policy

Supabase expanded its marketing practices and vendor disclosures in its privacy policy. The updated terms now explicitly state that the …

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Stay ahead of the changes

Track Supabase policy changes

Get alerted when this policy changes again, including what changed and why it matters.

All Supabase changes →