Privacy Policy
This policy explains what information Oakalytics processes, why it is used, and the choices available to you.
Information we process
Oakalytics can be used without an account. If you create an account, we process the email address, account identifier, authentication metadata, and optional profile information supplied through Supabase Auth or Google sign-in.
When cloud sync is enabled, we store the teams, builds, preferences, game progress, unlocks, profile activity, and other app data you choose to save. Public features may display a chosen Game Corner username and score. Published team or build share codes are readable by anyone who has the code.
- Local-only app data is stored on your device until you clear it or remove the app.
- Share-code payloads expire after 180 days.
- Our hosting and database providers may process basic request, device, IP-address, security, and diagnostic logs.
How we use information
We use information only to authenticate you, provide cloud sync and sharing, operate leaderboards and game features, secure and troubleshoot the service, and maintain or improve Oakalytics. We do not sell personal information or use it for targeted advertising.
Service providers and public data
Supabase provides authentication, database, and serverless-function services. Vercel hosts the web app and API routes. Google processes information when you choose Google sign-in. These providers process information under their own terms and privacy notices.
Leaderboard usernames and scores are public. Share codes are not indexed as profiles, but anyone with a valid code can retrieve its team or build payload. Do not put personal or confidential information in usernames, team names, build notes, or other shared fields.
Retention and security
Account and cloud-sync data is retained while your account remains active, unless a shorter period is stated above or retention is required for security or legal reasons. Provider logs may be retained under the provider's own schedule.
We use access controls, encrypted transport, database row-level security, and restricted server credentials. No online service can guarantee absolute security, so use a unique password and keep access to your email and devices secure.
Your choices and rights
You may use local mode, avoid public features, sign out, export a local backup, or delete your Oakalytics account from the Trainer account panel. Account deletion permanently removes your authentication account and associated cloud data; local device data may remain until you clear it or remove the app.
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, and to complain to a data-protection authority.
Children
Oakalytics is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher minimum age for consent to online services, you must meet that age or use the service with permission from a parent or guardian.
Contact and policy changes
For privacy questions or requests, email oakalytics@gmail.com. Do not include passwords, access tokens, or other sensitive credentials in your message. We may update this policy when the app or applicable requirements change; the effective date above identifies the latest version.