Privacy Policy

• Account details: your email address and password. Passwords are stored only as a secure hash by our authentication provider; we never see them.
• Profile: the display name you choose. It appears publicly on the leaderboard.
• Activity: your quiz, Threat Grid, Daily Grid, and Learning Path answers and scores, used to grade sessions, show your progress, and rank the leaderboard.
• Feedback: anything you send with the Feedback button, plus the page you were on and your browser type.
• Usage data: anonymous page-view statistics (pages visited, country, device type) without cookies, and standard server logs that include IP addresses for security and troubleshooting.

We don't sell your data, show ads, or use advertising trackers.

Your browser keeps your sign-in session and any unfinished quiz or grid so you can pick up where you left off. This is essential to how the app works, so there is no cookie banner. Clearing your browser data removes it.

We use a few service providers, who process data only to provide their service to us:

• Supabase for accounts and the database.
• Vercel for hosting and anonymous analytics.
• Resend for sign-up, password reset, and other account emails.

These providers may store data in the United States or other countries.

We keep your account and activity until you delete your account. Feedback you sent is kept after deletion but is no longer linked to you.

• Change your display name or password on your Profile page.
• Delete your account at any time from your Profile page. This permanently removes your account, scores, history, and leaderboard entries.
• Ask for a copy of your data, or a correction, by emailing hello@threatle.com.

Connections are encrypted, answers are graded on our servers, and access to the database is restricted. No system is perfectly secure, so please use a password you don't use anywhere else.

Threatle is not intended for children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

If we change this policy, we'll update the date above, and for significant changes we'll let account holders know by email or in the app.