Legal

Privacy policy.

Last revised: 6 May 2026

This page describes what InGrappling collects, where the data is stored, how long it's retained, and how to opt out. Plain English, not a legal contract.

What we collect

At launch, InGrappling does not require an account, does not track you across sites, and does not use third-party analytics. The only data we collect is anonymous usage analytics tied to a random session identifier:

  • A random session ID stored in a first-party cookie called ingrappling_sid. It is a UUID with no personal information, generated in your browser.
  • Event records of page views, filter usage, and navigation on our interactive map and /explore. Each event carries the session ID, the page URL, and the filter state you applied (no free-text you typed is stored).
  • Your chosen reading role (student, coach, school-owner, competitor, parent), if you set one. This preference is stored only in your browser's localStorage and is never sent to our server until you explicitly create an account in a future release.

We do not store your name, email address, IP address, approximate location, device fingerprint, or any other personal identifier.

Where it lives

Analytics events are written to a Supabase project hosted in the European Union (Frankfurt, with read replicas in London). Static site assets are served from a global CDN via Netlify. No data is shared with third-party advertising, analytics, or tracking vendors.

How long we keep it

  • Raw event rows are deleted after 180 days on a rolling basis. This is enforced by a scheduled task inside the database; we do not keep copies elsewhere.
  • Monthly aggregates (e.g. "5,234 page views for /invariants in March 2026") are retained indefinitely. These aggregates carry no session identifiers or personal data.
  • The ingrappling_sid cookie lives for 30 days and is refreshed on each visit. If you do not visit for 30 days the session expires and a new one starts the next time you return.

How to opt out

Clear cookies for ingrappling.com in your browser. This deletes the session cookie and resets any locally-stored preferences. Your next visit will begin with a new anonymous session. At this stage of the project we do not yet surface a "reject analytics" toggle or honour the browser's Do Not Track signal — both will land before we introduce accounts or any non-essential cookies.

Accounts and personal data (Phase 2)

InGrappling will offer optional accounts in a future release. Accounts will let you save bookmarks, track progress, and take private notes. Sign-up will require an email address. Before accounts launch, this page will be updated to describe what we store, how it's protected, how to export your data, and how to delete your account.

Contact

If you have a privacy question or would like to request information about analytics data tied to a specific session ID, use the contact page. Because event rows carry no personal identifier, we cannot associate a session with a person — you'll need to supply the session ID from your own browser for us to find the matching rows.

This notice is a launch draft. It will be reviewed by counsel before Phase 2 accounts launch.