VAULTIAC

Privacy Policy

1. Information We Collect

When you create an account, we collect:

• Email address
• Username (chosen by you)
• Password (stored as a secure hash — we never store your plain text password)
• Notification preferences
• Game activity (trivia scores, streaks, leaderboard rankings)

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Display your username on leaderboards and in-app features
• Send feature update notifications if you opt in
• Send transactional emails related to your account
• Analyze usage patterns to improve the product

3. Information We Do Not Collect

We do not collect payment information (no purchases exist currently), precise location data, or any data from minors under 13. We do not sell your personal information to third parties.

4. Data Storage

Your data is stored securely on Railway's infrastructure. Passwords are hashed using bcrypt and are never stored or transmitted in plain text. Authentication tokens are stored locally in your browser.

5. Leaderboard and Public Data

Your username and game scores (trivia points, streaks) may be displayed publicly on leaderboards. Your email address is never displayed publicly.

6. Third-Party Services

Vaultiac uses the following third-party services:

• PokéAPI — Pokémon data (no personal data shared)
• Pokémon TCG API — Card data (no personal data shared)
• Railway — Hosting and database infrastructure
• Resend — Transactional email delivery
• Anthropic Claude API — AI features (no personal data included in prompts)

7. Cookies and Local Storage

Vaultiac uses browser local storage to maintain your login session and game state. We do not use third-party tracking cookies or advertising cookies.

8. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us.

9. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.

10. Children's Privacy

Vaultiac is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email (if you have opted in to notifications) or via a notice on the site.

12. Contact

Questions about privacy? Contact us at vaultiac.com/contact.