Why does iOS mention a Supabase website when I sign in with Google?
ScratchSplit uses Supabase to securely handle sign-in. On iOS, Apple shows the secure website that begins the sign-in session before Google opens. This is a system security message: it helps you see which service is handling the authentication step.
The Supabase address is not a different app and does not change what ScratchSplit can access. Google’s consent screen identifies ScratchSplit, and the information we receive is used only to create or sign you into your ScratchSplit account.
Why not use a custom ScratchSplit sign-in domain?
A custom sign-in domain is an optional paid Supabase feature. ScratchSplit is currently built and supported by a small independent developer, and I am keeping the app’s operating costs within reach while it is still finding its audience. I am not able to take on the additional subscription cost just yet.
When ScratchSplit has enough traction to support that ongoing cost responsibly, I plan to add a branded sign-in domain. Until then, the existing Supabase sign-in address remains a secure, established part of the authentication process.
Is my information still safe?
Yes. Sign-in takes place over encrypted connections, and ScratchSplit uses the result only to authenticate your account. We do not use Google sign-in information for advertising. Read more in our Privacy Policy.