Privacy Policy · chart52

Overview

This policy describes how the person operating chart52 (the "Owner", "we", "us") handles personal information for the current free beta and the choices available to you. Contact the Owner at support@chart52.com. We do not sell your information, show ads, or use third-party analytics or advertising trackers. Features mentioned below apply when they are available and used; their description is not a commitment to launch or continue them.

Information we collect

Account details: your name, email address and password. Password authentication stores a password hash rather than the password itself. If Google sign-in is enabled and you use it, authentication may also receive and store your Google account identifier, profile name and image, email and verification status, and authentication tokens and related permissions or expiry information.
Your content: the charts, action names, colors, folders, notes, study games, practice sessions and results, comparisons and share links you create or import.
Preferences: settings such as theme, palette and notification choices.
Security and session data: for each signed-in session we record your IP address, browser user agent and timestamps. You can see and revoke sessions in Settings → Security. We also record when your account was last active.
Messages you send us: for example, support emails, deletion requests and feedback.
Technical and audit records: requests, errors, authentication events and administrative actions may produce records used to operate and secure the Service, including timestamps and technical identifiers.

How we use it

to provide the Service: create your account, sign you in, save and sync your charts, and show share links you create;
to send service emails such as verification, password-reset and security messages, plus any optional notifications you turn on;
to keep the Service and its users secure, prevent abuse, and fix problems;
to understand, in aggregate, how the Service is used so we can improve it;
to comply with the law and enforce our Terms.

For users in the EEA, UK and similar jurisdictions, our legal bases are: performing our contract with you (running the Service), our legitimate interests (security, abuse prevention and improvement), your consent (for optional notifications, which you can withdraw at any time), and complying with legal obligations.

Cookies and local storage

We use cookies to keep you signed in and protect against cross-site request forgery. When reCAPTCHA is enabled, Google may also set cookies for abuse prevention. Your browser's local storage keeps interface preferences, such as theme and panel layout, and may keep unsaved edits so they can be recovered. We do not use cookies for advertising or cross-site tracking.

We do not sell or rent personal information. We share it only:

With service providers used to operate hosting, storage, email delivery and abuse prevention. When Resend delivery is enabled, it processes the recipient address and service-email contents. If Google sign-in is enabled and you choose it, Google also processes information under its own privacy policy as part of authentication. When reCAPTCHA is enabled for signup or Google sign-in, Google receives browser, device and interaction information to assess automated abuse. Google's Privacy Policy and Terms of Service apply to reCAPTCHA.
Through public share links you create. Anyone with the link can see the shared chart snapshot.
For legal reasons: to comply with valid legal process, or to protect the rights, safety and security of our users, the public or the Service. This includes sharing relevant parts of rights complaints and responses with affected parties where necessary to address a dispute.
In a business transfer: as part of forming a business to operate the Service, a merger, acquisition or sale, subject to applicable law and the privacy commitments applicable to the information.

How long we keep it

Retention depends on the type of information, whether your account and features remain in use, pending requests, security investigations, and applicable legal or recordkeeping requirements. These criteria describe retention purposes, not a guarantee that your content will remain available.

Account and content: these support your account while it remains open, subject to deletion, suspension, closure and changes to the Service. Under the current free-account policy, stored workspace content, including charts, folders, games, templates and associated study records, may be cleared after one year of inactivity.
Trash: the current restore window is 30 days. After expiry, items are unavailable for ordinary restoration and eligible for physical cleanup; expiry does not mean every stored copy is erased at that instant.
Authentication, security and support records: session access expires separately from deletion of the underlying records. Retention depends on their use in authentication, abuse prevention, investigation, resolving requests or disputes, and applicable legal requirements. There is no additional fixed deletion schedule promised by this policy.
Deletion requests: requests are reviewed and processed by the operator, rather than immediately executed by the request button. Identity verification or clarification may be needed. Applicable legal deadlines and exceptions govern; this policy does not offer a separate guaranteed completion time. Some records may be retained where legally permitted for security, fraud prevention, legal compliance or establishing, exercising or defending claims.
Backups and other copies: deletion from the active Service does not necessarily erase copies in existing backups immediately. Backup retention depends on the backup system and applicable requirements; we do not promise a particular rotation interval. Copies you export, retain in your browser or share with others are separate from server-side deletion.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, to object to its processing, and to withdraw consent. You can do much of this yourself:

edit your profile in Settings → Profile;
use Library backup to export the supported active-library contents; it is not an export of all personal information, and its exclusions are shown in the interface;
revoke sessions in Settings → Security;
request account deletion in Settings → Data & privacy.

For other requests, including access to personal information outside the library export, email support@chart52.com. Verification of your identity or clarification of the request may be needed. Requests are subject to applicable legal rights, deadlines and exceptions, including protections against unlawful discrimination for exercising your rights. California residents: we do not sell or "share" personal information for cross-context behavioral advertising. If you are in the EEA or UK, you may also complain to your local data-protection authority.

Security

The Service uses safeguards such as password hashing, account access controls and restricted administrative access. No method of transmission or storage is completely secure. This policy does not guarantee prevention of unauthorized access, loss or disclosure, and does not limit security obligations imposed by law. Please use a strong, unique password and protect your devices and exported files.

International transfers

The Service is operated from the United States. Information may be processed in the United States and countries where the providers used for your account operate. Applicable international-transfer requirements still apply; using the Service does not waive them. Contact support@chart52.com for information about the providers, processing locations and any transfer safeguards applicable to your information.

Children

The Service is not intended for anyone under 16, and we do not knowingly collect their personal information. If you believe someone under that age has provided personal information, contact support@chart52.com so the report can be investigated and addressed under applicable law, including deletion where required.

Changes to this policy

Updates are posted here with a revised effective date. Additional notice or consent applies where required by law or an existing privacy commitment. Posting an update does not itself authorize materially different uses of previously collected information. This policy does not guarantee an additional advance-notice period.

Contact

Contact the Owner for privacy questions or requests: support@chart52.com.