Privacy policy
How Varbona handles account information and game activity.
Effective date: October 20, 2026.
Who operates Varbona
Varbona is operated by Alegre Technologies. For privacy questions, access or correction requests, or account deletion requests, contact gary.alegre@gmail.com.
Information used for Google sign-in
If you choose Google sign-in, Google and our authentication provider, Supabase, process your Google account identifier, email address and basic profile information such as your name and profile picture when Google supplies them. We use this information to verify your identity, maintain your sign-in session and identify your Varbona account. Varbona does not receive your Google password.
The Google permissions used for sign-in are OpenID, email and basic profile. We do not request access to your Gmail messages, contacts, calendar or Google Drive files. Google sign-in is currently being tested with invited participants; it does not automatically attach an existing portfolio solely because the email addresses match.
Other information you provide and create
Depending on the features you use, we store your account identifier and display details, chosen profile photo and favourite club, player holdings, play-money balances and transactions, orders, watchlists, lineups, competition entries and results, achievements and account preferences. We also store issue reports, support correspondence and relevant administrative actions.
If you join the VBN interest list, we store your email address and the record of your request. Joining does not create a wallet or convert play money into a token. If you claim an eligible competition prize, we may ask for the contact or delivery information needed to fulfil it.
How information is used
We use account and game data to operate Varbona, maintain accurate balances and results, deliver the features you request, respond to support requests, investigate abuse and correct errors. Google account information is used for authentication and account administration. We do not sell Google user data or use it for personalised advertising.
Visibility to other participants
Your displayed profile name, selected profile image, rankings, competition results and contributions to shared game features may be visible to other participants according to the feature and the site’s access settings. Your sign-in email, authentication credentials and private delivery details are not intended for public display.
Providers and storage
Supabase processes authentication information and sign-in sessions. Cloudflare provides hosting, traffic security and storage services used by Varbona. The existing alpha also uses OpenAI’s Sites hosting and sign-in infrastructure. Authorised administrators may access records to operate the game, handle support, fulfil prizes or investigate abuse. Information may be processed outside your country by these providers.
Google handles the Google sign-in process under its own privacy policy. Our use of Google user data is limited to the purposes described here. Information may also be disclosed when required by law or necessary to address fraud, abuse or security incidents.
Cookies and technical information
Sign-in and security features use cookies or similar session mechanisms to keep you signed in and protect access. Hosting and authentication providers may process technical information such as IP addresses, browser information, request times and security logs. This information supports service operation, troubleshooting and protection against abuse.
Retention and deletion requests
We retain account and game records while they are needed to provide your account and maintain the game’s records. You can request access, correction or deletion by emailing the contact above. We may need to verify account ownership before acting. Some records may need to be retained for security, dispute resolution, legal obligations or the integrity of shared competition and transaction records. Backup copies and provider logs may persist under the relevant retention arrangements.
The current alpha does not offer automatic self-service account deletion. Deletion requests are reviewed manually. Revoking Google access stops that Google connection; it does not by itself erase records already stored by Varbona. You can review or remove your Google connection in your Google Account connections.
Changes and contact
We will update this policy when our practices change. If we introduce a new use of Google data requiring consent, we will disclose it and request consent before that use begins. Questions and requests can be sent to gary.alegre@gmail.com.