Privacy Policy

1. Information We Collect

Account Information

• Email address
• Username and display name
• Authentication credentials (if using email signup rather than OAuth providers like Google)

Minimal signup requires only an email via supported OAuth providers.

Payment Information

• Card type and last 4 digits
• Billing address and contact details
• Transaction data (processed by Stripe—we never store full card numbers)

Device & Technical Data

• IP address
• Device type and identifier
• Browser and operating system information

Usage Data

• Pages visited and interactions
• Problem attempts, submissions, and progress
• Time spent on different features
• Performance metrics for benchmarking and service improvement

Voluntary Information

• Support messages and feedback
• Problem contributions and community interactions
• Survey responses

2. How We Collect Information

Directly from You

• Account creation and profile updates
• Using our platform features
• Contacting support or providing feedback
• Contributing problems or solutions

Automatically

• Cookies and similar technologies
• Server logs and analytics
• Device information upon access

From Third Parties

• OAuth providers (Google, GitHub) for authentication
• Stripe for payment verification
• Analytics providers

3. How We Use Your Information

• Provide access to problems, solutions, and premium features
• Process subscriptions and payments via Stripe
• Track your progress and generate performance insights
• Improve the platform through usage analytics
• Deliver customer support
• Prevent fraud and maintain security

Legal Basis

• Contract Performance: Processing required to deliver the Service
• Legitimate Interest: Analytics, security, and service improvements
• Consent: Optional communications and features

4. Information Sharing

We work with trusted third-party services:

• Stripe: Payment processing (PCI DSS compliant)
• Discord: Community access and engagement
• Analytics providers: Service improvement

We do not sell, rent, or trade your personal information. We only share data as described here or when required by law.

5. Data Security

• Industry-standard encryption for data in transit and at rest
• Passwords are salted and hashed—never stored in plaintext
• Payment data handled exclusively by Stripe
• Regular database backups with secure offsite storage

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request removal of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Limit how we process your data

To exercise these rights, contact us at support@whitebox.ac.

7. Data Retention

• Account data: Retained while your account is active
• Payment records: Retained as required by tax and legal obligations
• Analytics: Retained in aggregated, anonymized form

You may request deletion of your data at any time.

8. Cookies

• Essential cookies for authentication and core functionality
• Privacy-focused analytics with anonymized data
• No third-party advertising cookies

You can manage cookie preferences through your browser settings.

9. Breach Notification

If a data breach affects your personal information, we will:

• Notify you within 72 hours when feasible
• Send notification to your registered email
• Detail the breach, affected data, and remediation steps

10. International Transfers

Your data may be processed outside your country of residence. We implement appropriate safeguards including standard contractual clauses where applicable.

11. Policy Updates

We may update this Privacy Policy periodically. Changes will be posted at this URL, and continued use after changes constitutes acceptance.

12. Contact

Questions about this Privacy Policy? Contact us:

• Email: support@whitebox.ac