Privacy Policy

1. Information We Collect

We collect the following information when you use Grit:

Information you provide:

• Account data — username, email address, password (encrypted)
• Profile data — bio, avatar image, favourite games, social media links
• Content — builds, guides, comments and chat messages you post

Information collected automatically:

• Usage data — pages visited, features used, posts liked or saved
• Device data — browser type, operating system, IP address

2. How We Use Your Data

We use your data to:

• Provide and operate the Grit platform
• Manage your account and authenticate your sessions
• Send notifications about activity on your content
• Improve the platform based on usage patterns
• Enforce our Terms of Service and community guidelines
• Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Sharing

We may share your data with:

• Service providers — hosting (Render), image storage (Cloudinary), who process data on our behalf under strict confidentiality agreements
• Legal requirements — if required by law, court order or to protect the rights and safety of users

Your public profile information (username, bio, posts, achievements) is visible to all Grit users by default. You can adjust visibility in your Privacy settings.

4. Data Storage & Security

Your data is stored on secure servers in the EU (Frankfurt). We implement industry-standard security measures including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data in transit
• JWT tokens for secure authentication
• Regular security reviews

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security of your data.

5. Cookies & Local Storage

Grit uses browser localStorage (similar to cookies) to:

• Keep you logged in between sessions
• Remember your preferences (notification settings, privacy settings)
• Store your favourite games and social links

We do not use third-party tracking cookies or advertising cookies. You can clear your browser's local storage at any time to remove all stored data.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of your personal data
• Correction — update your data via your Settings page
• Deletion — delete your account via Settings → Danger Zone
• Portability — request your data in a portable format
• Objection — object to processing of your personal data

To exercise any of these rights, contact us at support@gritapp.org. We will respond within 30 days.

7. Children's Privacy

Grit is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests: