Privacy Policy
Last updated: April 2026
1. Data Controller
HamChops is operated as an independent service. For all data-related enquiries, contact us at [email protected].
2. Information We Collect
When you use HamChops, we collect:
- Account Information: Email address and display name from your Google or GitHub account when you sign in via OAuth.
- Learning Data: Your lesson progress, quiz responses, XP, streaks, and spaced repetition schedules.
- Payment Information: Processed securely by Stripe. We store only your Stripe customer ID and subscription status — never your card details.
- Technical Data: IP address, browser type, and error logs collected automatically for security and debugging purposes.
3. How We Use Your Information
- To provide and personalise your learning experience
- To track your progress and calculate spaced repetition schedules
- To process and manage payments for Pro upgrades
- To send transactional messages directly related to your account (e.g. payment receipts, critical service notices)
- To diagnose errors and maintain the security of the Service
We do not send marketing emails.
4. Cookies
We use essential cookies only:
- Session: To keep you logged in
- Security: CSRF protection
- Preferences: Your dark mode and cookie consent choice
We do not use tracking, analytics, or advertising cookies.
5. Third-Party Data Processors
We share data only with the following processors, each bound by appropriate data protection agreements:
- Stripe — Payment processing (card data never touches our servers)
- Google / GitHub — OAuth authentication only
- Railway — Cloud hosting and database infrastructure
- Sentry — Error tracking (personal data is anonymised before transmission)
We never sell your data to third parties.
6. Data Retention
We retain your account data for as long as your account is active. If your account is deleted, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. Stripe transaction records).
7. Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Ask us to correct inaccurate or incomplete data
- Erasure — Request deletion of your account and personal data
- Portability — Request an export of your learning data in a machine-readable format
- Objection — Object to processing where we rely on legitimate interests
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
8. Governing Law
This Privacy Policy is governed by the laws of the Province of Alberta and the federal laws of Canada applicable therein. Any disputes will be subject to the exclusive jurisdiction of the courts of Alberta.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via a notice on the Service. The "Last updated" date at the top of this page will always reflect the most recent revision.
10. Contact
For any privacy questions or concerns: [email protected]