Privacy Policy
Last updated: [DATE]
Who we are
[Legal entity name], operator of Tracepoint. Contact: [email].
Data we collect
Account data (email; if you sign in with Google, your Google email, name, and avatar). Usage/progress data (XP, completed lessons and tickets, settings). Technical data collected automatically by our hosting providers (IP address, request logs). We do not run advertising or third-party analytics trackers.
Cookies
We use a single strictly-necessary cookie to keep you signed in. We do not use tracking or advertising cookies.
How we use your data
To operate your account, save and sync your progress, secure the service, and communicate essential account information.
Legal basis (EU/UK users)
[Contract / legitimate interests / consent — confirm with counsel.]
Sub-processors
Supabase (authentication + database), Vercel (hosting), Cloudflare (DNS/CDN), Google (sign-in). [Add Stripe / AI provider when applicable.]
Where your data is stored
Our infrastructure is hosted in [region]. If you are in the EU/UK, your data may be processed in the United States. [Confirm transfer mechanism.]
Data retention
We keep account data while your account is active and delete it after account deletion, subject to legal retention needs. [Specify log retention windows.]
Your rights
You can access, export, correct, and delete your data. Use the account page to export or delete your data, or contact [email].
Children
Tracepoint is not intended for children under [13/16]. We do not knowingly collect data from children below that age.
Changes & contact
We will post updates here. Questions: [email].