Privacy Policy

1. Information We Collect

We collect the following information when you use Grit:

Information you provide:

• Account data — username, email address, password (encrypted)
• Profile data — bio, avatar image, favourite games, social media links
• Content — builds, guides, comments and chat messages you post

Information collected automatically:

• Usage data — pages visited, features used, posts liked or saved
• Device data — browser type, operating system, IP address

2. How We Use Your Data

We use your data to:

• Provide and operate the Grit platform
• Manage your account and authenticate your sessions
• Send notifications about activity on your content
• Improve the platform based on usage patterns
• Enforce our Terms of Service and community guidelines
• Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Sharing

We may share your data with the following third-party service providers who process data on our behalf:

• Render.com — cloud hosting and infrastructure. Your data is stored on their servers. Privacy Policy
• Cloudinary — image and media storage. Profile photos, banners and post images are stored on their platform. Privacy Policy
• Resend — transactional email delivery. Your email address is shared to send verification and password reset emails. Privacy Policy
• OpenAI — AI content moderation. Text content you submit (posts, comments, clips, chat messages) is sent to OpenAI's moderation API to check for harmful content. Content is not stored or used for training by OpenAI under our usage tier. Privacy Policy
• Legal requirements — if required by law, court order or to protect the rights and safety of users

We never sell your personal data to third parties. Your public profile information (username, bio, posts, achievements) is visible to all Grit users by default.

4. Data Storage & Security

Your data is stored on secure servers in the EU (Frankfurt). We implement industry-standard security measures including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data in transit
• JWT tokens for secure authentication
• Regular security reviews

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security of your data.

5. Cookies & Local Storage

Grit uses browser localStorage (similar to cookies) to:

• Keep you logged in between sessions
• Remember your preferences (notification settings, privacy settings)
• Store your favourite games and social links

We do not use third-party tracking cookies or advertising cookies. You can clear your browser's local storage at any time to remove all stored data.

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of your personal data
• Correction — update your data via your Settings page
• Deletion — delete your account via Settings → Danger Zone
• Portability — request your data in a portable format
• Objection — object to processing of your personal data

To exercise any of these rights, contact us at support@gritapp.org. We will respond within 30 days.

7. Children's Privacy

Grit is not directed at children. In accordance with GDPR requirements applicable in the European Union, you must be at least 16 years old to create an account. In other jurisdictions the minimum age is 13.

We do not knowingly collect personal data from children under the applicable minimum age. If you believe a child has provided us with personal data, please contact us immediately at privacy@grit-app.app and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests: