Privacy Policy

Last updated: June 10, 2026

What we collect

Account: email and (optionally) Google account info you sign in with.
Profile: handle, display name, bio, avatar, share-kit entries — you choose what to add.
Gates: the content and rules you publish.
Play data: each visit creates an anonymous visitor token (stored in the browser). Attempts and outcomes are logged so you can see stats.
Technical: IP address and user-agent at sign-in for security; not shown to gate owners.

What we don't do

No advertising trackers.
No selling data to third parties.
No cross-site tracking pixels.

Sub-processors

We use infrastructure providers (database, hosting, email delivery) under standard data-processing agreements. They process data on our instructions only.

Your rights (GDPR & similar)

You can access, export, correct, or delete your data anytime from your profile page (Profile → Privacy & account):

Export: download everything we have on you as a JSON file.
Delete: mark your account for deletion. 30-day grace period, then permanent purge.
Correct: edit your profile, gates, and share kit directly.

For anything that the dashboard can't handle, email tlpth.labs@gmail.com.

Retention

Account data is kept until you delete it. After deletion, a 30-day grace period applies, then data is permanently purged from the live database. Backups roll off within 30 additional days. Aggregated, non-identifying stats may be retained.

Cookies & local storage

We use a session cookie/local-storage entry for sign-in, and a visitor token in local storage so your gate visits aren't double-counted. No third-party advertising cookies.

Changes to this policy

We reserve the right to change these terms in the future. We would probably inform you but do not necessarily promise to do so.

Contact

Data controller: tlpth labs GmbH · tlpth.labs@gmail.com