Privacy Policy

Who operates this website

The Econ Ace is an independent economics learning website introduced on our About Us page. The operator’s legal name and public privacy contact have not yet been supplied for publication. This disclosure will be updated when those details are available.

Information we use

• Accounts: your email address, account ID, authentication credentials and session information. Supabase Auth manages passwords; passwords are not stored in our learning tables. Login and account-deletion password checks pass through our server to Supabase.
• Learning: curriculum and level preferences, lesson completion, flashcard review status, activity/checklist progress, quiz scores, saved mistakes, and question attempts. Attempts include the question ID, answer text, result, time and any self-assessed marks. Avoid adding sensitive personal information to answers.
• Technical information: hosting and authentication providers process requests, including IP addresses, browser/request information and operational or security logs. Our custom authentication diagnostics contain a reference ID, action, allowlisted error code, status and a fixed sanitized message, rather than submitted passwords, tokens or email addresses.

Why and where information is processed

We use this information to provide login and recovery, remember your preferences, save learning across devices, show your own progress and troubleshoot failures. Educational pages remain available without an account.

• Supabase provides authentication, session management and the database for private account progress. Access policies restrict learning records to their account owner.
• Vercel hosts the website and server routes, which process account requests and learning records in transit and may retain operational logs.
• Resend is the configured SMTP provider for confirmation and password-reset emails. It receives recipient email addresses, authentication email content and delivery information. Authentication links are sensitive; do not share them.
• Your browser stores guest progress and session-related information described in the Cookie Policy.

The website does not currently upload personal files to Supabase Storage. Founder photographs and icons are public website assets served with the site. The earlier ChatGPT Sites version is on a separate domain; its browser progress cannot be read automatically on this domain. These policies describe the Vercel version.

Providers may process information in locations covered by their service arrangements. Specific project regions, backup periods and provider log-retention settings have not been verified for this disclosure.

Analytics and AI

The Analytics page calculates your learning summary from your own attempts. Student progress analytics stays separate from visitor statistics; answers and progress are not sent to Vercel Web Analytics.

We use Vercel Web Analytics for aggregate website traffic statistics. It receives reviewed public page paths, timestamps, browser and operating-system versions, device type, approximate location and script version. A safe referring origin or reviewed public path may also be included. We strip URL queries and fragments, exclude authentication, recovery, account and personal analytics pages, and reject custom events. We do not send names, email addresses, account IDs, passwords, tokens or student answers as analytics events.

Vercel processes incoming network requests and uses a request-derived hash to distinguish visitors, without analytics cookies or cross-site identifiers. Vercel says visitor sessions are discarded after 24 hours; this is not a promise that aggregate statistics are deleted after 24 hours. Aggregate retention depends on the project plan and settings. See Vercel’s Web Analytics privacy documentation.

AI tools have helped create and edit the website and educational material. The website does not currently send student answers, account details or progress to an AI service. Answer checks use the app’s programmed checks or your self-assessment, not an AI grading service.

Retention and deletion

Cloud account and learning records remain until the account is deleted; the app has no automatic inactivity-deletion schedule. Analytics shows the latest 5,000 attempts, but older cloud attempts are not automatically deleted. Guest attempts retain up to 5,000 entries in this browser. Other guest progress remains until browser site data is cleared.

In My account, account deletion removes the Supabase Auth user and associated live curriculum preferences, lessons, attempts, flashcard reviews and learning activity through database relationships. The flow asks for your password and explicit confirmation. If deletion reports unavailable or fails, do not assume records were removed. Any stored files added outside the current app require operator cleanup before deletion can complete.

Deletion clears this app’s account cache and signs out this browser. It does not erase separate guest progress, emails already delivered to your inbox, or immediately remove provider backups and operational/security logs. Their retention depends on provider settings; we have not verified a fixed period and do not promise instant erasure from backups. Existing access tokens can remain cryptographically valid until expiry, but this app validates users on the server and the deleted account’s learning rows are removed.

Your controls and privacy help

You can study as a guest, change curriculum preferences or password, log out, choose whether to import guest progress, delete your account, and clear this domain’s browser storage. Import is optional and preserves existing cloud records. Logging out does not delete an account. Clearing browser storage does not delete cloud records.

Privacy requests, including access, correction or deletion assistance, need an operator contact. A public support address is still awaiting publication; we have not invented one. Self-service controls remain available from My account. Depending on where you live, you may have additional privacy rights and a right to contact your data-protection authority.

There is no paid subscription or billing integration at present. If subscriptions are introduced, account settings will need a separate, straightforward cancellation control and clear billing consequences.

External links and updates

Links to syllabus documents, research and other websites take you to services with their own privacy practices. We will update this notice when the implemented data flows change.