Legal
Privacy Policy
Last updated July 2026
1. Overview
This policy explains what data GAMR collects, why, and your choices. We aim to collect only what we need to run the Service, and to say so in plain language.
2. Data we collect
Account data: email, display name, and avatar you provide.
Learning data: your progress, XP, badges, streaks and saved projects.
Billing data: handled by Stripe. We store a customer reference and subscription status, never your full card details.
Optional usage analytics (only if you say yes):if you accept analytics in the cookie banner, we record product events — like "a lesson was opened" or "a hint was used" — tied to a random identifier stored in your browser. This tells us which lessons confuse people so we can fix them. We deliberately never collect the code you type, passwords, private messages, feedback drafts, or your precise location, and we do not store IP addresses with analytics events or use fingerprinting. If you decline, no analytics identifier is created and no events leave your browser.
Feedback you send us:when you use the Feedback button, we store what you wrote, the lesson and step you were on, a rough device description (like "phone · android · chrome"), any files you chose to attach, and — only if you typed it — your email address. Attachments are stored privately and are only viewable by the site owner.
3. How we use data
To provide and personalize your learning experience, process payments, maintain security, improve lessons based on aggregate usage, and respond to feedback you send us. We do not sell your personal data and we do not run advertising.
4. Processors
We rely on trusted processors including Supabase (authentication, database, storage — this is also where analytics and feedback live) and Stripe (payments). If you accept analytics, we may additionally use Google Analytics with IP anonymization, restricted to a handful of coarse milestone events (such as "signed up" or "completed a lesson") — never your code, feedback text, or identity. Each processor handles data on our behalf under their own safeguards.
5. Cookies and similar storage
Essential cookies keep you signed in and remember your consent choice — the site cannot work without them. Optional analytics storage exists only if you accept it, and you can change your mind any time via "Cookie & privacy settings" in the footer. Details live in the Cookie Policy. We do not use advertising trackers.
6. Your rights
You may access, export, or delete your account data at any time. Contact privacy@gamr.dev to make a request — this includes asking us to delete analytics data tied to your visitor identifier or feedback you submitted. Withdrawing analytics consent stops all future collection immediately and deletes the identifier from your browser. Depending on your location, you may have additional rights under laws such as the GDPR or CCPA.
7. Data retention
We retain your account data while your account is active. Analytics events are kept for at most 24 months, then deleted or aggregated. Feedback reports are kept while they are useful for improving the Service and deleted on request. If you delete your account, we remove your personal data within a reasonable period, except where retention is legally required.
8. Contact
Questions about privacy? Contact privacy@gamr.dev.