The policy discloses that Supabase uses tracking tools for advertising campaign measurement and personalized ad delivery, and provides California residents with a Privacy Settings mechanism to manage these preferences under California Civil Code Section 1798.83.
This analysis describes what Supabase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes an opt-out mechanism for advertising and tracking data uses for California residents, and discloses that tracking tools are used for personalized advertising purposes, a data use category that may engage CCPA opt-out rights and California Privacy Rights Act provisions.
The updated policy discloses that Supabase may use business contact information, including email domains, to identify organizations for sales and marketing outreach. The policy now explicitly states that personal information will be shared with Customer.io, a marketing communications service provider. For marketing communications, the policy relies on user consent for three purposes: sending marketing messages, using approximate location information to determine relevant communications, and combining personal information from different sources for relevance determination. These three consents operate independently, meaning you can grant or withdraw any of them without affecting the others. You can manage these marketing-related consents separately through the consent mechanisms available in your account or in response to marketing communications.
View change record →Under this clause, Supabase uses tracking tools for personalized advertising and provides a Privacy Settings tool for users to manage advertising preferences. California residents may also request information about third-party direct marketing disclosures under California Civil Code Section 1798.83.
How other platforms handle this
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
Supabase has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"California - Your California Privacy Rights: If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. We may use tracking tools to measure the performance of our advertising campaigns and help deliver personalized ads. You can manage your preferences in the Privacy Settings.— Excerpt from Supabase's Supabase Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages California Civil Code Section 1798.83 (Shine the Light), CCPA, and the California Privacy Rights Act (CPRA), which expands opt-out rights to include sharing of personal information for cross-context behavioral advertising. The California Privacy Protection Agency and the California Attorney General are the primary enforcement authorities. FTC Act Section 5 also applies to deceptive advertising tracking practices. 2) GOVERNANCE EXPOSURE: Medium. The use of tracking tools for personalized advertising engages CPRA opt-out rights and may require a Do Not Sell or Share opt-out mechanism if data is shared with advertising partners for cross-context behavioral advertising. The Privacy Settings tool should be assessed for CPRA compliance. 3) JURISDICTION FLAGS: California-specific obligations are most pronounced. Similar opt-out rights exist under Colorado, Connecticut, Virginia, and other state privacy laws for users in those states, though the policy does not explicitly address these. 4) CONTRACT AND VENDOR IMPLICATIONS: Advertising and analytics partners who receive tracking data may constitute service providers or third parties under CCPA/CPRA, requiring appropriate contractual restrictions. Vendor assessments should confirm that advertising partners are not using data for purposes beyond those disclosed. 5) COMPLIANCE CONSIDERATIONS: Legal teams should audit the Privacy Settings tool to confirm it provides a fully functional opt-out mechanism for CCPA/CPRA purposes. The categories of advertising and analytics partners receiving tracking data should be disclosed in a CCPA-compliant privacy notice. Annual California Civil Code Section 1798.83 disclosure processes should be documented.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes an opt-out mechanism for advertising and tracking data uses for California residents, and discloses that tracking tools are used for personalized advertising purposes, a data use category that may engage CCPA opt-out rights and California Privacy Rights Act provisions.
Under this clause, Supabase uses tracking tools for personalized advertising and provides a Privacy Settings tool for users to manage advertising preferences. California residents may also request information about third-party direct marketing disclosures under California Civil Code Section 1798.83.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Supabase.