Privacy Policy

This Privacy Policy describes how DSA Tracker (“DSA Tracker”, “we”, “our”) collects, uses, and stores information when you use dsatracker.tech and related services. We aim to keep this short, specific, and honest.

1. Data we collect

• Account data: email address, display name, optional username. Provided either via email/password signup or Google OAuth.
• Progress data: which problems you mark as solved, starred, revision-flagged, and free-text notes you attach to a problem.
• Preferences: selected role, level, focus topic, daily goal, and display settings (theme, density) — stored locally in your browser and synced to our database for signed-in users.
• AI input: when you run AI insights or skill analysis, the role, level, free-text skills paragraph, and a summary of your progress are sent to the configured AI provider (OpenRouter or NVIDIA NIM). The raw text is not stored beyond the request lifetime; we cache only the structured result.
• Request logs: our server records standard HTTP access logs (path, status, duration, IP). These rotate automatically and are not used for advertising profiling.

2. Cookies & local storage

We use HttpOnly session cookies (an access token, a refresh token, and a guest-mode flag) to keep you signed in. Display preferences, guest-trial progress, and cached responses are stored in your browser’s localStorage/sessionStorage. None of this is transmitted to third parties.

3. Third-party services

• Supabase— authentication and database hosting. Subject to Supabase’s privacy policy.
• OpenRouter / NVIDIA NIM — used to generate AI insights when you request them. Subject to their respective privacy policies.
• Google AdSense (when active) — if advertising is enabled, Google uses cookies to serve ads based on your prior visits. You can opt out at Google Ads Settings.

4. What we do not do

• We do not sell your data.
• We do not use your AI input for training third-party models.
• We do not run cross-site advertising trackers beyond what is required for AdSense.

5. Your rights

You can export all of your data (CSV/JSON) and permanently delete your account yourself from Profile → Preferences & data — no email required. Deletion is immediate, permanent, and irreversible. You can also reach us via the Contact page for any data request.

6. Changes

We will update the “Last updated” date above whenever the policy changes. Continued use after a change indicates acceptance of the revised policy.