This Privacy Policy describes how DSA Tracker (“DSA Tracker”, “we”, “our”) collects, uses, and stores information when you use dsatracker.tech and related services. We aim to keep this short, specific, and honest.

1. Data we collect

• Account data: email address, display name, optional username. Provided either via email/password signup or Google OAuth.
• Progress data: which problems you mark as solved, starred, revision-flagged, and free-text notes you attach to a problem.
• Preferences: selected role, level, focus topic, daily goal, and display settings (theme, density) — stored locally in your browser and synced to our database for signed-in users.
• AI input: when you run AI insights or skill analysis, the role, level, free-text skills paragraph, and a summary of your progress are sent to the configured AI provider (OpenRouter or NVIDIA NIM). The raw text is not stored beyond the request lifetime; we cache only the structured result.
• Request logs: our server records standard HTTP access logs (path, status, duration, IP). These rotate automatically and are not used for advertising profiling.

2. Cookies & local storage

We use a session cookie to keep you signed in and a CSRF token cookie to prevent cross-site request forgery on form submits. Display preferences, problem progress, and cached AI results are stored in your browser’s localStorage. None of this is transmitted to third parties.

3. Third-party services

• Supabase— authentication and database hosting. Subject to Supabase’s privacy policy.
• OpenRouter / NVIDIA NIM — used to generate AI insights when you request them. Subject to their respective privacy policies.
• Google Fonts — fonts are served fromfonts.googleapis.com; Google may log the request per their published policy.
• Google AdSense (when active) — if advertising is enabled, Google uses cookies to serve ads based on your prior visits. You can opt out at Google Ads Settings.

4. What we do not do

• We do not sell your data.
• We do not use your AI input for training third-party models.
• We do not run cross-site advertising trackers beyond what is required for AdSense.

5. Your rights

You can request export or deletion of all data tied to your account by emailing the address on our Contact page. Deletion is permanent and irreversible.

6. Changes

We will update the “Last updated” date above whenever the policy changes. Continued use after a change indicates acceptance of the revised policy.