Legal

What we collect

We collect your email address and username when you create an account. If you subscribe, payment details are handled securely by Stripe — we never see or store card numbers. We store your question attempts, scores, and session times to power progress tracking and leaderboards. We also collect anonymized, aggregate usage analytics (via Vercel Analytics and Speed Insights) to understand site performance and usage patterns — this does not use tracking cookies and cannot be used to identify you individually.

How we use your data

Your email is used for account-related communications only (confirmation, password reset, billing). Your usage data is used to display your statistics and leaderboard position. We do not sell your data to third parties.

Lawful basis for processing

We process your data under the UK GDPR on the following bases: Contract Performance (Article 6(1)(b)) for account management, service delivery, and payment processing; and Legitimate Interest (Article 6(1)(f)) for security, fraud prevention, and essential website functionality.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising, tracking, or analytics cookies.

Data storage and retention

Your data is stored securely on Supabase infrastructure hosted in the EU (Ireland). We retain your data for as long as your account is active. You may request deletion at any time by contacting us.

Third-party services

We use Supabase (authentication and database), Stripe (payments), Resend (transactional email delivery), and Vercel (hosting and analytics). Each of these services maintains its own privacy policy and appropriate data processing agreements.

Children

This service is intended for users aged 13 and over. Users under 18 should use this platform under the supervision of a parent, guardian, or teacher. We do not knowingly collect personal data from children under 13.

Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data, withdraw consent, and file a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise your rights, use our contact form.

Changes to this policy

We may update this policy from time to time. Any significant changes will be communicated via email.