Privacy Policy

1. Data controller

The data controller for EquaRank is Mikołaj Gaweł, a natural person based in Kraków, Poland. Contact: equarank@gmail.com.

2. What this policy covers

This policy explains what personal data we collect when you use the Service, how we use it, and the choices you have. It applies to the website and all features available through it.

3. Data we collect

• Account data — email address, username, display name, and password (stored as a hash by our authentication provider). If you sign in with Google, we receive your email and basic profile info.
• Learning progress — solved problems, attempt results, points, streaks, roadmap progress, and test sessions. This is the core of the Service.
• Community content — forum posts, comments, and solutions you choose to publish.
• Billing data — if you subscribe to Premium, payments are processed by Stripe. We store your subscription status and Stripe customer reference, never your card number.
• Technical data — standard server logs (IP address, browser type, timestamps) used for security and debugging.

4. How we use your data

• to provide the Service: accounts, progress tracking, leaderboards, community;
• to process subscriptions and manage billing;
• to secure the Service and prevent abuse;
• to communicate with you about your account (e.g. password resets);
• to improve problem content and features based on aggregate usage.

We do not sell your personal data and we do not use third-party advertising or tracking networks.

5. Cookies

We use only essential cookies: authentication session cookies (so you stay signed in) and local storage for preferences such as your selected roadmap track and locally cached progress. We do not use analytics or advertising cookies, which is why you will not see a cookie consent banner.

6. Third-party processors

We share data only with processors needed to run the Service:

• Supabase — authentication and database hosting for account and progress data;
• Stripe — payment processing for Premium subscriptions;
• Google — only if you choose Google sign-in.

7. International data transfers

Our Operator is based in Poland (EU). Several processors we use (including Stripe, Supabase, and Google) may store or process personal data in the United States and other countries outside the European Economic Area.

When personal data is transferred from the EEA or UK to a country that is not covered by an adequacy decision, we rely on appropriate safeguards under applicable law — typically the European Commission's Standard Contractual Clauses (SCCs) provided by those processors, and where available frameworks such as the EU–US Data Privacy Framework.

8. Retention and deletion

We keep your data for as long as your account exists. You can request deletion of your account and associated personal data at any time by contacting us; we will delete it within 30 days, except where we must retain records (for example invoices) to comply with legal obligations.

9. Your rights

Depending on where you live (including under the GDPR in the EU / EEA, and similar laws elsewhere), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. US users may have additional rights under state privacy laws (for example California) where they apply. To exercise any of these rights, email us at the address below. EU / EEA users also have the right to lodge a complaint with their local data protection authority (in Poland: the President of the Personal Data Protection Office — UODO).

10. Changes and contact

We may update this policy from time to time; material changes will be announced in the app or by email. Questions or requests: equarank@gmail.com. See also our Terms of Service.