Missing privacy policy and terms in Supabase
mediumUpdated Oct 13, 2026
If Auth stores emails and Postgres stores user rows, say that Supabase is the processor for that data. A delete account action should delete the Auth user and the rows, or document what you retain and why.
Fix for Supabase
If Auth stores emails and Postgres stores user rows, say that Supabase is the processor for that data. A delete account action should delete the Auth user and the rows, or document what you retain and why. RLS does not write the policy page for you.
The five-minute check, the other platforms, and the agent prompt are on the full guide. More Supabase fixes are on the Supabase page.