Privacy Policy
Last updated: Dec 19, 2025
thetamac is a mental math training platform with features like practice/training sessions, performance stats, leaderboards, multiplayer/racing modes, and (optional) paid subscriptions.
This policy explains what we collect, how we use it, and what choices you have.
Account information
- If you create an account via Google sign-in, we receive your email address, name, and profile image from Google.
- You may also update certain profile fields in Settings (e.g., your display name and profile image).
- We store account settings/preferences you choose (for example: theme, sound effects, notifications, auto-advance, default difficulty, and default timer).
Training, gameplay, and stats
- Training session configuration and results (e.g., difficulty, operations, problems attempted, accuracy, streaks, timing).
- Per-problem attempt data for performance analysis (e.g., operands, operation, correct answer, your submitted answer, correctness, time taken).
- Multiplayer and racing match data needed to run and review games (e.g., rounds, scores, timings, match status, and race events).
- Leaderboard-related stats derived from your activity (e.g., rating/rank).
Shop and cosmetics
- In-app currency balance and items you purchase/unlock.
- Cosmetic selections (e.g., equipped skin/trail/vehicle).
Guest mode
If you use the app without signing in, we create a guest identifier and guest name and store them in an HTTP-only cookie on your device. This lets the app remember your guest session (the guest cookie is intended to last about 7 days). If you submit a guest score to a guest leaderboard, we store the guest name and score.
Billing information (subscriptions)
If you subscribe, payments are processed by Stripe. We store limited billing-related fields such as your Stripe customer ID, subscription ID, subscription status/plan, and renewal date. We do not store your full card number.
Usage analytics, logs, and diagnostics
- We use Vercel Analytics to understand traffic and improve the product. Vercel may process basic device and usage information (for example, page views).
- We also log limited in-app telemetry events (for example, upgrade page views and button clicks) primarily for product improvement and troubleshooting.
- Like most online services, our infrastructure may generate server logs that can include IP address, user agent, timestamps, and requested URLs.
Feedback and messages
- If you send a feature request from Settings, we store your message and (if signed in) your account email so we can follow up and prioritize requests.
- If you contact us, we receive the contents of your message and any information you choose to share.
- Provide and operate the app (accounts, training, multiplayer/racing, leaderboards).
- Personalize your experience (settings, cosmetics, premium access).
- Process subscriptions and manage billing through Stripe.
- Maintain security, prevent abuse, and debug issues.
- Improve features and product decisions using aggregated analytics/telemetry.
We share information with service providers that help us run the app, for example:
- Google (authentication): to let you sign in with Google.
- Stripe (payments): to process subscriptions and manage billing.
- Vercel (hosting/analytics): to host the app and provide analytics.
- Upstash (rate limiting, if enabled): to help prevent abuse by tracking request counts for an identifier (such as a user ID or email).
- Hosting providers for real-time features: if you use multiplayer/racing, a separate Socket.io server may handle real-time gameplay traffic (for example, answers and actions) and may be hosted on an infrastructure provider distinct from the main web app.
We may also share information if required to comply with law or to protect the rights, safety, and security of the app and its users. We do not sell your personal information.
- Authentication cookies/tokens: used by NextAuth to keep you signed in.
- Guest cookie: if you use the app as a guest, an HTTP-only cookie stores a signed guest token so we can recognize your guest session.
- Socket authentication token: to connect to the multiplayer/racing server across origins, the app may fetch a short-lived token and send it as part of the socket connection handshake.
- Preferences: your theme preference is stored in your browser (local storage) and, if you’re signed in, may also be saved to your account settings.
You can control cookies through your browser settings. If you block certain cookies, parts of the app (like sign-in) may not work.
We keep personal information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.
Training and match history is generally retained to power your stats and leaderboards. You can request deletion of your account by contacting us.
- Update certain profile information in Settings.
- Manage your subscription via the Stripe billing portal (if subscribed).
- Control cookies and local storage via your browser settings.
- Contact us to request access, correction, or deletion of your data.
thetamac is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.
We may update this policy from time to time. We’ll post the latest version on this page and update the “Last updated” date above.
Questions or requests related to privacy? Contact us at support@thetamac.com.