Privacy Policy

1. What we collect

• Account details: your email address, username, and password. Passwords are stored only as a secure hash by our authentication provider; we never see them.
• Profile details you choose to add: display name, bio, and whether your profile is public.
• Your progress data: projects, topics, progress types, entries (titles, descriptions/notes, dates, points), and your answers to extra-points questions.
• Plan and billing status: your plan, subscription status, and payment records sent to us by our payment provider. We never receive or store your card details.
• Referral info: if you arrive through a link like ?ref= (e.g. from a YouTube video) or an affiliate link (?aff=), we store that code with your account so we know where users come from and can credit affiliates.
• Basic usage info: when you last used the app, and your settings (for example, whether animations are paused).
• Anonymous visit statistics: which pages are viewed, the referring site, and approximate country, device and browser type. This is collected by Vercel Web Analytics without cookies and isn't used to identify you or follow you across other sites.
• Refund requests: the reason and any details you give us.
• One-time email codes: stored only as a hash, expire after 10 minutes, and can be used once.

2. Why we use it

• To provide the service: log you in, store your progress, calculate points, and show your charts.
• To send account emails: verification and password reset codes. We don't send marketing emails unless you opt in.
• To handle payments, refunds, student discounts, and affiliate commissions (once paid plans are available).
• To keep PTrack secure and prevent abuse.
• To understand, in aggregate, how the product is used (for example, sign-ups per video) so we can improve it.

3. Public profiles

Your profile is private by default. If you turn on a public profile, anyone with the link can see your username, display name, bio, points, streaks, activity heatmap, project and topic names, and plan badge. On Ultimate, resolved/paid achievements (crowned entries) can appear as titles with their type and date. Your notes and descriptions are never shown publicly.

4. Who we share it with

We don't sell or rent your data. We use these service providers to run PTrack, and they process data only on our behalf:

• Supabase — database and authentication (stores your account and progress data).
• Vercel — hosting the website and privacy-friendly, cookie-free visit statistics.
• Resend — sending verification and password-reset emails.
• Lemon Squeezy — payments, as our merchant of record (they handle your card details, taxes, invoices, and affiliate payouts under their own privacy policy).

We may also disclose information if required by law, or to protect our users and the service.

5. Cookies

• Login cookies — keep you signed in. Required for the app to work.
• Referral cookies (ref, aff) — remember which link you came from, for 30 days.
• When paid plans are live, Lemon Squeezy's affiliate script may set a cookie to credit the affiliate who referred you.

We don't use advertising or cross-site tracking cookies, and our visit statistics don't use cookies at all. Some settings may also be stored in your browser.

6. How long we keep it

We keep your data while your account exists. If you delete your account, your profile, projects, topics, and entries are deleted. We may keep payment and refund records for as long as tax and accounting rules require.

7. Your rights

• Access and export: Pro and Ultimate users can export their data as CSV/JSON in Settings. Anyone can ask us for a copy.
• Correct: edit your profile and entries any time.
• Delete: email us from your account email to delete your account and data.
• Object or complain: contact us, or your local data protection authority.

Email devsecknight@gmail.com and we'll respond within 30 days.

8. Security

We use encrypted connections (HTTPS), hashed passwords and codes, and database rules that stop users from reading each other's data. No system is perfectly secure, so please use a strong, unique password. If you find a security issue in PTrack, please report it to devsecknight@gmail.com before disclosing it publicly.

9. Children

PTrack is not intended for children under 13, and we don't knowingly collect their data. If you believe a child has an account, contact us and we'll delete it.

10. International transfers

Our service providers may store and process data in countries other than yours. We rely on providers that protect data with industry-standard safeguards.

11. Changes

If we make important changes to this policy, we'll update the date above and, where appropriate, let you know by email or in the app.