Privacy Policy

1. About this policy

1600.lol ("we," "us," or "our") operates the website and services at 1600.lol (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

2. Information we collect

2a. Information you give us via Google Sign-In

We use Google OAuth solely to create and authenticate your account. When you click "Sign in with Google," Google shares the following profile information with us:

• Your name (as set in your Google account)
• Your email address
• Your Google profile photo URL
• A unique Google account identifier

We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or any other Google services or data beyond basic profile information. We do not use your Google data for advertising or share it with advertising networks.

2b. Usage and practice data

We collect information about how you use the Service: questions you answer, your answer choices, time spent, accuracy by topic, practice test results, streaks, and similar activity. This data is used to power your Stats dashboard and personalize your practice experience.

2c. Payment information

If you purchase a Pro plan, payments are processed by Stripe. We do not store your full card number. Stripe's privacy policy governs how Stripe handles your payment data.

2d. Automatically collected information

We collect standard server logs and analytics data including IP address, browser type, device type, pages visited, and referrer. We use PostHog for product analytics to understand how the Service is used in aggregate.

3. How we use your information

• Account creation and authentication — your name, email, and profile photo are stored so you can sign in and so other users can identify you on leaderboards and friend features.
• Service operation — to save your progress, provide your Stats dashboard, maintain streaks, and track question history.
• Transactional communication — to send receipts, account notices, and support replies to your email address.
• Product improvement — aggregate, anonymized usage data helps us understand which features work and which need improvement.
• Safety and compliance — to detect abuse, enforce our Terms of Service, and comply with legal obligations.

We do not sell your personal information. We do not use your Google account data for advertising purposes.

4. Google API Services User Data Policy

1600.lol's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the features described in this policy.
• We do not transfer Google user data to third parties except as necessary to operate the Service (e.g., storing it in our database), and never for advertising.
• We do not use Google user data for any purpose that is unrelated to providing the Service.

5. Information sharing

We do not sell, rent, or trade your personal information. We share it only in these limited circumstances:

• Service providers — we use Supabase for database hosting and Stripe for payment processing. These providers access data only to perform services on our behalf.
• Friends features — if you use the friends or leaderboard features, your username and question-answered count are visible to users you connect with.
• Legal requirements — if required by law, court order, or to protect the safety of our users.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before any such transfer is subject to a different privacy policy.

6. Data retention

We retain your account and practice data for as long as your account is active or as needed to provide the Service. If you delete your account or request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.

7. Your choices and rights

• Access and correction — you can view and update your profile information in your account settings.
• Account deletion — email us at hi@1600.lol to request deletion of your account and associated data.
• Revoking Google access— you can revoke 1600.lol's access to your Google account at any time via your Google Account permissions. Revoking access does not automatically delete your 1600.lol account or data.
• Marketing emails — we do not send marketing emails. If that changes, we will provide an unsubscribe mechanism.

8. Cookies and local storage

We use cookies and browser local storage to maintain your session, remember your preferences (such as which practice variant you last saw), and for analytics. We do not use third-party advertising cookies.

9. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

10. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. No internet transmission is completely secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when changes were last made. Material changes will be communicated to you by email or a prominent notice on the Service before they take effect.

12. Contact

Questions or requests about this Privacy Policy: hi@1600.lol.