Information involved
Depending on how you use TraceTheory, we may process:
- Account and contact details: email address, display name, sign-in information and account identifiers. A sign-in provider, if you choose one, may supply information needed for your account.
- Gameplay: cases opened, progress, reviewed exhibits, notes, pins, drafted theories and final submissions.
- Communications: messages and information you provide when you contact us for help.
- Device, log and security data: information such as IP address, browser or device details, request logs and sign-in or error events generated while operating an online service.
- Future transactions only if paid access is enabled: purchase, subscription, entitlement and payment-status records. A future payment processor may handle card details at checkout. Before paid launch, the precise checkout and card-data flows must be verified and described; this policy does not claim that TraceTheory never receives card data.
Your browser may keep sign-in or gameplay state locally between visits. Please do not include sensitive details about real people in notes or messages.
Why information is used
We use information to create and secure accounts, provide case access, save and display your progress, evaluate your submitted theory, respond to requests, troubleshoot problems, prevent abuse and maintain the service. If payments are later enabled, transaction records would also be used to provide access and administer billing and refunds. We may use information to meet applicable legal obligations.
Who may receive information
Information may be processed by services that support hosting, sign-in and storage. If paid access is enabled, checkout and transaction information may also go to a payment provider. Other players do not receive a player directory or a view of who is online. We may disclose information where legally required or necessary to protect people or the service.
TO BE CONFIRMED BEFORE PAID LAUNCH
Verify and describe the operator, relevant service-provider categories, any required regional disclosures and any international processing that actually applies. Specific providers and storage locations are not established here.
Keeping and protecting information
We keep information as needed to operate the service and meet applicable obligations. Specific retention periods and deletion procedures have not yet been finalized. No online service can guarantee absolute security. Protect your sign-in details and report suspected unauthorized account activity once a contact channel is available.
TO BE CONFIRMED BEFORE PAID LAUNCH
Retention schedule and account deletion process.
Your choices and requests
You can choose what to write in notes and may stop using the service. Depending on your location, you may have rights to access, correct, delete or otherwise control personal information. We will handle valid requests as applicable law requires.
TO BE CONFIRMED BEFORE PAID LAUNCH
Working privacy-request contact channel, legal operator identity and mailing contact, and any legally required regional privacy notices.
Updates
We may update this policy when the service or legal requirements change. We will update the date at the top and provide additional notice where required by law. This policy describes the current free-access experience and possible future paid processing separately; it is not a claim that paid checkout is currently active.