Services, website and credits
Who receives what, and who we build on
Overview
Prysm relies on a small number of outside services, listed below with what each receives. The privacy policy is the authority on personal data, and this list agrees with it. This website is Next.js on Vercel at www.prysmblast.com; the bare prysmblast.com redirects to www, and every page is generated at build time. Game data is provided by IGDB.com.
How it works
- 1
Each part of the site has its own layout, so a change to one can't leak into another: the landing page, the marketing pages and guides, the legal pages, and these docs.
- 2
The three legal paths, /privacy, /delete-account and /support, are registered in the App Store and Google Play consoles, so they never change. They are fully static: no cookies, no analytics, no sign-in, no cookie banner and no client JavaScript, except the small sign-in component on the deletion page.
- 3
Facts the legal pages depend on, such as the support address and the deletion window, live in one config file. A missing fact shows a visible to-do marker rather than a guess.
- 4
These docs are generated at build time from typed data, with the same palette as the app: near-black, one orange accent, and the yellow highlight from the store art.
- 5
Prysm stands on open-source work: Expo, React Native, Supabase, Next.js, Tailwind CSS and Framer Motion. Steam, Xbox, PlayStation, Nintendo, TikTok, YouTube and every other product name belong to their owners; Prysm is not affiliated with or endorsed by Valve, Microsoft, Sony or Nintendo.
Third-party services
| Service | Used for | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage (United States) | Everything Prysm stores about you |
| Resend | Sign-in emails | Your email address and the one-time code in each email |
| Apple, Google | Sign in with Apple, Continue with Google | Nothing from Prysm; they return your email address and basic profile |
| OneSignal | Push notifications | Your account id, a push token, a device record and the text of each notification |
| RevenueCat | Subscriptions and ad-revenue reporting | An app user id tied to your account, purchase events from the store, and ad events on the free plan (impression, tap, ad unit, estimated revenue) |
| Google AdMob | Ads on the free plan | Your advertising identifier if you consented, approximate location from your IP address, and your interactions with ads. Pro users send nothing |
| Apple, Google | Payments | Purchase and subscription processing. Prysm never sees a card number |
| DeepSeek | Vague search | The text of a description, with no account identifier |
| Steam | Owned games | Your Steam id, when you choose to link |
| Xbox, through OpenXBL | Game history | Your Xbox identity, when you choose to link |
| TikTok, YouTube | Matching a shared video | The URL you shared, fetched to read its caption |
| IGDB (Twitch issues its token) | The game catalog | Nothing personal: servers query it on their own credentials |
| Vercel | Hosting this website | Your IP address and browser details, in standard request logs |
| Cloudflare, then Gmail | Receiving support email | Emails you send to the support address |
Key decisions
Docs never disclose more than the policy
Any service these docs name must also be in the privacy policy, described the same way. When a new processor appears, the policy is updated first.
Static legal pages
Both stores require a reachable privacy policy and a way to delete the account, and both reject apps over them. Static pages with no scripts are the most reliable way to keep them working.
One domain
The docs live at /docs on the main site rather than a subdomain: one deploy, one set of colours, and one domain for search engines and judges.