We use Supabase Edge Functions to handle the OAuth callback. We do not own or control the supabase root domain — it is our backend hosting provider (similar to apps using AWS Lambda or Google Cloud Functions).
Thank you for reaching out in relation to Our Domain Validation process, the next steps will be sent to you via DM. Please refer to our domain validation resource: Domain Validation Explanation for any further questions you may have about the process.