Privacy Policy

1. Who we are

This policy describes how Giants of the World ("we", "the Service") handles personal data when you visit the site, create an account, or purchase access.

2. Data we collect

• Account: email and authentication identifiers (via Supabase Auth).
• Billing: payment status, Stripe customer and subscription IDs, plan type. Card details are handled by Stripe; we do not store full card numbers.
• One Seam newsletter: if you subscribe, your email address, the surface you subscribed from (footer, entry, or journey), the wording you agreed to, and the times you submitted and confirmed. You are not subscribed until you confirm by email. We use that address only for One Seam (a short welcome, then one seam a week about a crack in a giant story). We do not sell the list or send product feature spam from it.
• Usage: basic technical logs (e.g. errors, server requests) needed to run and secure the Service.
• Analytics: aggregate page views and a small number of events (newsletter confirmation, reaching checkout, and purchase). Both analytics tools we use are cookieless and neither builds a profile of you across sites.

3. Why we use it

To provide accounts, unlock paid content, process payments, prevent abuse, and improve reliability. We do not sell your personal data.

4. Processors

We use trusted processors: Supabase (authentication and database), Stripe (payments), Vercel (hosting, and cookieless site analytics), Resend (One Seam confirmation, welcome, and three follow-ups for new confirms only), and Umami (cookieless analytics, hosted in the EU region). Each processes data under their own policies as needed to deliver the Service.

5. Retention

Account and plan data are kept while your account is active and as required for legal or accounting records. You may request account deletion; residual billing records may remain where the law requires.

6. Your choices

You can update your account email through the auth flows and manage billing through the Stripe customer portal.

You can delete your account yourself from the Account page; it removes your profile, favourites and login immediately, and cancels any running subscription first. To get a copy of your data instead, or if you would rather we did it for you, email hello@giantscodex.com. Deletion removes your profile, your favourites, and your login, and we action it within 30 days. Records we must keep for accounting, such as Stripe payment history, are the exception. Depending on your region (e.g. GDPR/CCPA), additional rights may apply.

7. Cookies and storage

We use essential cookies/local storage for sessions (auth) and similar technical needs. Our analytics do not use cookies: neither Umami nor Vercel Analytics sets one. We do not run third-party advertising trackers in the current version.

8. Children

The Service is not directed at children under 16. If you believe a child has registered, contact us to remove the account.

9. Changes

We may update this policy; the "Last updated" date will change. Material changes may be noted on the site.

10. Contact

Questions about this policy, or about the data we hold on you: hello@giantscodex.com