privacy policy

zentype is built by CMMhero. We collect only what is needed to run the Service. This policy explains what we collect, how we use it, and your choices.

1. data we collect

• Account: email, username, avatar URL via Supabase Auth (GitHub/Google/Discord OAuth). Stored in profiles.
• Typing results: WPM, accuracy, consistency, chars, timeline, mode/variant, timestamp in test_results.
• Gamification: XP, level, achievements, streaks in user_points/point_events/user_achievements.
• Settings: theme, font, gameplay prefs in user_settings (jsonb).
• Local: guest results and settings cached in your browser (Zustand + localStorage) before login.
• Operational: Upstash Redis for leaderboards and rate limiting; no third-party analytics.

2. how we use data

We use your data to log you in, save your typing results, show leaderboards and profiles, and remember your settings. We do not sell your data or show ads.

3. sharing

Your profile and leaderboard rankings are public. We use Supabase and Upstash to run the app. We do not share data with advertisers.

4. retention & deletion

Data is retained while your account exists. You can export JSON or delete all results in Settings → Danger Zone (deletes test_results for your user). Account deletion removes related rows via cascade.

5. security

Postgres Row Level Security restricts reads/writes to your own rows. Auth uses PKCE with httpOnly cookies. Redis entries expire after 1 year. No system is 100% secure; report issues via GitHub.

6. your rights

Access, export, or delete your data in-app. Contact us to request account deletion or with questions.

7. changes

We may update this policy; material changes will be noted in-app or on GitHub. Continued use means acceptance.

8. contact

Visit cmmhero.top or email contact@cmmhero.top.