Assistant privacy policy
Effective October 9, 2026 · DARKO
This policy covers DARKO's public NBA assistant integration and its chart links on darko.app. Your assistant provider manages your conversation under its own policy and controls. For support or privacy requests, contact kostya@darko.app.
What DARKO processes
DARKO processes the tool arguments your assistant sends: player searches and NBA IDs, metrics, filters, date and chart ranges, colors, titles, annotations and imported DARKO links. Requests include technical client information and standard HTTP metadata. Hosting providers receive network information, including IP addresses, to deliver and protect the service.
These inputs retrieve public basketball data, generate charts, return results and help maintain the service. DARKO requires no user account or OAuth sign-in and does not request your entire conversation. Widget edits send the current chart settings and compact comparisons back to your assistant.
Links and service providers
Chart links contain their settings, including custom titles. Anyone with a link can access the chart. Links can appear in browser history, caches and provider logs. Avoid putting confidential information in titles or requests; stopping sharing does not revoke an existing link.
Vercel hosts the service. Supabase serves basketball queries and aggregate usage counters. Your assistant provider receives returned settings, comparisons, images and links. Website pages store local display preferences; optional website fonts can contact Google Fonts. GitHub handles public issue reports, and the support mail service processes email sent to DARKO.
Vercel Web Analytics is disabled. No external Vercel or Supabase log drains are configured. DARKO's own usage logs and daily counters record only the UTC day, tool, coarse client family, outcome, duration and player count. They contain no user or session identifier, player name or ID, title, URL, request body, IP address or raw user agent. Infrastructure logs are separate.
Retention
Chart and search memory caches have freshness intervals of five and two minutes; entries can remain until a subsequent read, eviction or process termination. PNG delivery requests one-day CDN freshness and one-day stale allowances. These cache settings are not guaranteed deletion deadlines. DARKO has no personal chart account or individual-cache purge control.
The currently configured Vercel Pro plan without Observability Plus provides one-day runtime-log and standard Observability windows; firewall traffic is shown for the last 24 hours. The currently configured Supabase Pro plan provides a seven-day API and database log window. Provider-held security or legal records and live database storage are separate. See Vercel's privacy notice and Supabase's privacy policy.
Aggregate daily usage counters have no automatic expiry. DARKO does not currently promise a fixed deletion deadline for support and privacy correspondence, which may be retained indefinitely. Contact us to request deletion; records needed for an ongoing dispute or legal obligation may be retained.
Your choices
You can omit or change titles, choose whether to share links, clear local website preferences and manage your connection and conversation through your assistant provider. Email privacy questions or requests to kostya@darko.app. Keep private information out of public GitHub issues.