Privacy policy

Who runs this

Winter Arc is made and run by Fuwad, an individual designer, not a company. If anything here is unclear or you want to exercise any of the choices below, email fuwadmuhd@gmail.com.

What is collected

Only what the app needs to work:

• Account. Your email address and a password. Passwords are handled and hashed by Supabase; Winter Arc never sees or stores them in plain text.
• Google sign-in. If you sign in with Google, Google shares your name, email address and profile picture. Nothing else from your Google account is accessed.
• Your progress. Which tasks you tick off, when you joined, and any notes or links you add as proof. Notes are private to you and are never shown to other members.
• Usage analytics. PostHog records page views, clicks and general interactions, along with your browser, device type and an approximate location derived from your IP address. This is used in aggregate to see what is working.
• Cookies. A session cookie keeps you signed in, and PostHog sets a cookie to tell returning visitors apart. There are no advertising cookies.

Why it is collected

• To run the challenge: sign you in, save your ticks and show your progress.
• To understand how the app is used so it can be improved.
• To find and fix problems.

Your data is never sold, and it is never used for advertising or shared with anyone other than the services listed below.

Where it lives

Winter Arc relies on a few services, each of which processes data on its behalf:

• Supabase stores your account and progress (authentication and database).
• Vercel hosts the website.
• PostHog stores usage analytics.
• Google is only involved if you choose to sign in with Google.

These services may store data outside your country, including in the United States.

How long it is kept

Your account and progress are kept until you delete your account. Analytics data is kept according to PostHog's retention settings and is not tied back to your account after deletion.

Your choices

• Delete your account at any time from your profile. This permanently removes your account, progress and notes.
• Reset your progress from your profile to start the arc again from Day 1.
• Ask for a copy of your data, or ask for it to be deleted, by emailing fuwadmuhd@gmail.com.
• Block cookies in your browser. Signing in needs the session cookie, but everything else will keep working.

Children

Winter Arc is not intended for anyone under 16. If you believe a child has created an account, get in touch and it will be removed.

Changes

If this policy changes in a way that matters, the date at the top will be updated and, for significant changes, a notice will be shown in the app.

Contact

Questions about privacy: fuwadmuhd@gmail.com.