Privacy Policy

Terminus Expanse ("we", "us") is the data controller for the personal data described in this policy. You can reach us at privacy@terminus-expanse.com for any privacy question or request.

Account information: email address, username, and password (stored securely hashed by our authentication provider, Supabase Auth — we never see or store your plain-text password). If you sign in with Google or GitHub, we receive your name, email, and profile picture from that provider.

Usage & progress data: quests completed, quiz answers, XP, rank, streaks, skills mastered, and similar gameplay data needed to run the platform.

User content: chat messages, blog posts, guild activity, and anything else you choose to post.

Payment data: if you subscribe to a paid plan, Stripe processes your payment details directly — we never see or store your full card number. We keep a record of your subscription status, plan, and billing history.

Technical data: IP address, browser type, and basic device information collected automatically by our hosting provider, Vercel, for security and reliability purposes.

To provide and operate the Service: create your account, track your progress, run guild/chat/social features, and process payments.

To communicate with you: transactional emails (password resets, billing receipts) always; product emails (inactivity reminders, streak warnings, achievement congratulations, a weekly digest) only if you've enabled them in Settings → Notifications, sent through our email provider, Resend. You can opt out of any non-essential email at any time.

To keep the Service safe: investigate reports of abuse, enforce our Terms of Service, and prevent fraud.

To improve the Service: understand which features are used and where the product needs work.

If you're in the European Economic Area or UK, we process your data under these legal bases: performance of our contract with you (running your account and subscription), our legitimate interests (keeping the Service secure and improving it), your consent (marketing emails, which you can withdraw anytime), and compliance with legal obligations (tax and billing records).

We share data with a small number of processors, only as needed to run the Service:

We use a small number of strictly necessary cookies to keep you signed in (set by Supabase Auth) and to remember your theme and language preference. We don't use third-party advertising or tracking cookies.

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we're required to keep certain records longer (for example, billing records for tax purposes).

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can update most of your data directly in Settings, or contact us at privacy@terminus-expanse.com to exercise any of these rights. If you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

The Service is not directed at children under 16. We don't knowingly collect personal data from children under that age without appropriate parental consent. If you believe a child has provided us with personal data without consent, contact us and we'll remove it.

Our service providers may process data outside your country of residence, including in the United States. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses, as required by applicable law.

We use industry-standard measures — encryption in transit, access controls, and row-level security on our database — to protect your data. No system is perfectly secure, and we can't guarantee absolute security, but we work to keep your data safe and will notify you as required by law if a breach affects you.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by email before they take effect.

Questions about this policy or your data? Reach us at privacy@terminus-expanse.com.