Privacy Policy

We collect the following categories of information:

• Account information. When you sign in, our authentication provider (Supabase Auth) stores your email address and, if you use Google sign-in, the basic profile information Google returns. We do not store passwords — sign-in is handled with one-time email links or Google, and any password hashing is managed entirely by Supabase Auth.
• Profile data. Your chosen username and your target solve times.
• Solve and session data. The solves, sessions, scrambles, penalties, timestamps, and any smart-cube move data you record or import (for example from csTimer), which we use to produce your statistics and analytics.
• Content you add. Links you choose to attach to your profile, such as video links for notable solves.
• Usage data. Basic, first-party analytics events (such as pages viewed and key actions) that we store ourselves to understand and improve the product.

• To provide the service — recording solves and generating your statistics, charts, milestones, and predictions.
• To authenticate you and keep your account secure.
• To operate optional features you choose to use, including AI-generated performance insights.
• To understand aggregate usage and improve the product.
• To communicate with you about your account when necessary.

Some information you create is public by design — for example, your public profile page and leaderboard standing display your username and solve statistics. You control whether to complete a public profile.

We share data with a small number of processors only as needed to run the service:

• Supabase — authentication and database hosting.
• Google (Gemini API) — if you use AI performance insights, the solve statistics needed to generate that insight are sent to Google’s Gemini API to produce the response.

We do not sell your personal information.

We use a small number of cookies that are necessary for the service to function. These include a secure, HTTP-only session cookie set by our authentication provider to keep you signed in, and a cookie that remembers your time zone so daily statistics are shown correctly. We do not use third-party advertising or cross-site tracking cookies.

We collect first-party usage analytics that we store in our own database. This helps us see which features are used and where the product can improve. These analytics are tied to your account only while your account exists; if you delete your account, the events are disassociated from you.

We keep your information for as long as your account is active. You can permanently delete your account at any time from Account Settings. Deletion is irreversible and removes your authentication account, profile, solve and session history, and other data you own. Any usage-analytics events are disassociated from your identity.

The service is served over HTTPS, and authentication and password hashing are handled by Supabase Auth rather than stored in our own database. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

The service is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may be communicated through the service.

If you have questions about this policy or your data, contact us at team@subx.guru.