Information we collect
The Service collects the following information, limited to what is needed to provide exploration experiences.
- Account information: your email address and the configured state of your sign-in methods (password, Google account, passkey, and optional two-factor authentication).
- Exploration data: the experiences you open, your discovery logs, checkpoint answers, confidence input, and progress.
- Payment information: your current plan (Dawn / Stella / Astra), billing state, and renewal schedule. Card details are handled by Stripe and are never stored on the Service’s servers.
- Technical information: session data used to keep you signed in, your display language and theme settings, and communication logs generated on access.
How we use it
We use the information collected only for the following purposes.
- Authenticating your account and keeping you signed in.
- Saving your exploration experiences and showing you where to return next.
- Providing Stella / Astra features and managing billing.
- Improving the quality of the Service, and investigating and fixing issues.
- Preventing misuse such as unauthorized access and impersonation.
- Sending important notices and responding to your inquiries.
Cookies and browser storage
We use cookies and your browser’s localStorage to retain settings such as your login session, display language, and theme. These are necessary to keep your exploration continuous and are not used for advertising-based tracking.
If you disable cookies in your browser, some features — such as staying signed in — may not work.
External services
The Service uses Supabase to store authentication and data, Stripe to process payments, and an email provider to send authentication-related messages. Each service receives only the information needed to fulfill its purpose.
Except where required by law, we do not provide your personal information to third parties without your consent.
Retention
We retain information while your account is active and for as long as needed to fulfill the purposes above.
When you delete your account, we delete or anonymize your information within a reasonable period, except where we are legally required to retain it.
Security
Passwords are stored hashed and communications are encrypted. Where you prefer, you can choose stronger sign-in methods such as passkeys or optional two-factor authentication.
We take reasonable and appropriate measures to prevent the loss, leakage, or damage of information.
Your rights
You can review, correct, or delete your registered information and close your account. We respond to the extent we can confirm your identity.
For these requests, or any questions about how we handle personal information, please use the contact below.
Use by minors
If you are a minor, please use the Service with the consent of a parent or guardian.
Changes to this policy
We may revise this policy in response to changes in the Service or in applicable law. When we make a significant change, we will announce it within the Service.
The revised policy takes effect once posted on this page.
Contact
For any questions about this policy or the handling of personal information, please reach us through the contact form.