Privacy policy

Who is responsible

Leo Wong is the data controller. Contact support@chartrooms.app with any privacy question or request.

What we collect

• Account details — your email address, and a password or the social login you chose. Held by our authentication provider, not by us directly.
• Subscription status — which plan you are on, so we know what to unlock. We never see or store your card details; the payment processor handles them entirely.
• Learning progress — lessons completed, drill attempts and scores, streaks. Currently stored in your own browser or device; when account sync arrives it will be tied to your account.
• Basic usage counts — page views and feature usage, aggregated. IP addresses are hashed with a rotating salt so we can count visitors without identifying them.

We do not run advertising trackers, and we do not sell or rent personal data to anyone.

Why we are allowed to

• To provide the service — performance of our contract with you.
• To take payment and meet tax obligations — contract and legal obligation.
• To keep the service working and secure — our legitimate interests, balanced against your rights.

Who else processes it

• Clerk — accounts and authentication.
• Paddle — payments, as Merchant of Record. Paddle is the seller for the transaction and an independent controller of the payment data.
• Vercel — hosting and delivery.
• Upstash (Redis) — aggregate usage counters.

Some of these operate outside your country, including in the United States. Transfers rely on the safeguards those providers offer, such as standard contractual clauses.

How long we keep it

Account data lasts as long as your account. Delete the account and it goes, other than records we must keep for tax and accounting — typically seven years for transaction records, which are held by Paddle as Merchant of Record.

Your rights

You can ask for a copy of your data, correction, deletion, or restriction of processing, and you can object to processing based on legitimate interests. Email support@chartrooms.app and we will respond within one month.

You can delete your account yourself from your account settings, which removes your profile and login. If you are in the UK or EU you may also complain to your data protection authority; in Canada, to the Office of the Privacy Commissioner.

Cookies

We use cookies that are necessary for the service: keeping you signed in, and remembering your progress. There are no advertising or cross-site tracking cookies. The payment processor sets its own cookies during checkout.

Children

Chartrooms is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

If we change this policy materially we will say so on the site and, where the change affects you meaningfully, by email.