Privacy Policy
Last updated
What we collect
Without an account: your progress, filters and display settings stay in your browser (local storage and IndexedDB) and are not sent to us.
With an account: your email address, your sign-in provider, the progress you choose to cloud-save, and your billing status. Card details are handled by Stripe and never reach our servers.
Optional browser analytics are collected only if you accept them (see the cookie policy). Our servers also record account-linked billing events, described below.
Why we use it
Contract: to run your account, sync your progress and bill you. Legitimate interest: to keep the service secure and prevent fraud. Consent: for optional browser analytics and any marketing email.
Account-linked billing and server events (account sign-ups, purchases, subscription starts, renewals, cancellations, resumptions and endings, payment failures and recoveries, and refunds) are recorded for contract and legitimate interest purposes regardless of the cookie banner. They are not browser analytics.
Who processes it
We use Supabase (database and sign-in), Vercel (hosting), Stripe (payments), PostHog (browser analytics only with consent; account-linked billing events), Sentry (error reports) and Resend (email) as processors, under data processing agreements.
Your rights
You can export your data and delete your account from Account → Data. Depending on where you live you may also have the right to access, correct, restrict or object to processing, and to complain to your data protection authority.
Contact: support@hundopath.com.
Global Privacy Control
If your browser sends a Global Privacy Control signal we treat it as a refusal of optional browser analytics and do not ask again. It does not stop the billing events described above, which are part of providing your account.
Regional addenda
[Placeholder: addenda for the EU/UK (GDPR), California (CCPA/CPRA) and other regions will be added after legal review.]