GM! CARL

Privacy

Your data, in plain language.

GM! Carl is a one-person studio in Milwaukee. This page lists everything GM Spaces collects, who sees it, how long it stays, and how you delete it yourself. No ads. No selling data. Ever.

What we collect, and why

Your account

Signing in stores your email address (that is the login, there are no passwords). Everything on your profile is optional: display name, headline, bio, avatar, city, tags, role, links, WhatsApp number, birthday. Other members see what you put on your card; your email and birthday are never shown to them.

Location

Nothing about where you are is collected until you do one of these, each a tap you take on purpose:

  • Set your home in the room app. That spot stays on your own device only.
  • Place a drop (an event, an offer, a release). Its spot and address are public on the map for as long as the drop is up. A home address is allowed only on a private draft.
  • Claim a business pin. The storefront's spot is public after Carl approves it; never a home.
  • Share presence with people who added you. They see a rounded spot, about a block, until you turn it off.
  • Walk-up check. Scanning a pass or a drop checks you are nearby. The distance is checked and not stored.

Events and passes

A GM! Pass intake stores your name, email, phone, role and the answers you give. Checking in, missions and buddy adds are kept per event. Hosts see real names; the public room board shows screen names only.

AI features

Some things in GM Spaces are written by an AI model: the room's answers to "ask", event intros, pass matches, the recap after an event. For those, the text you typed and your screen name, headline and tags are sent to the model, and the model's reply is stored next to your account so the feature does not run twice. Real names and emails are not sent to the model. The models run on Cloudflare's own platform.

Notifications and sign-in on this device

If you turn on notifications, your browser's push subscription and your account id are stored on a studio server Carl runs himself in Milwaukee (live.gmcarl.xyz), which also hosts the notification service. If you add a passkey, the public half of it is stored there too. Alerts to Carl about your actions (a business request, a claim, feedback) can include your email.

Usage and logs

Each page view writes one row: the page, the referring site, country and device type. No cookies, no ad trackers, no fingerprinting. Public forms (feedback, surveys, pass intake, sign-ups) store a hashed version of your IP address and your browser name for about a day to stop spam. If the app crashes, a short error report with your email and browser is kept so it can be fixed.

Where it lives

The services under the hood

Your data is processed by the infrastructure the studio is built on. Each sees only what it needs for its job, and none gets your data for advertising.

  • Supabase — sign-in and profiles (database & auth)
  • Cloudflare — hosting, app database, uploads, AI models, page-view counts (edge platform)
  • live.gmcarl.xyz — the studio's own server in Milwaukee: notifications, passkeys (self-run)
  • Mapbox / OpenFreeMap / OpenStreetMap — map tiles and turning an address into a spot (maps)
  • DiceBear — generated avatars, seeded from your name or id (images)
  • Resend — sign-in links and confirmations (email delivery)
  • Stripe — only if you buy a Skill Lab seat; Stripe handles the card, we never see it (payments)
  • WhatsApp — only the number you choose to add, shown on your card (messaging)
  • Substack — only if you link your newsletter on your card (publishing)
  • Cal.com — only if you book a call through the embedded booker (scheduling)

How long

Retention

Your account data stays while you have an account. Drops age off the map on their own (events a few hours after they end, offers when their window closes, releases after a month) but stay on your own card until you remove them. Pass and event records stay with the event. Spam counters clear after a day. Database backups are kept for 90 days, so a deleted account can linger in a backup for up to that long and nowhere else.

Your controls

See it, fix it, delete it

Your profile is yours to edit or blank out any time. To delete your account, open your profile in the room app and tap Delete my account. It erases every record keyed to you, your uploads, your profile and the login itself, at once, and it cannot be undone. If you would rather not use the button, write to hello@gmcarl.xyz from your account email.

Turn off location sharing or notifications from the same places you turned them on.

Kids

GM! Carl isn't directed at children under 13, and we don't knowingly collect their data. If a kid signed up, tell us and we'll delete the account.