1. Who is responsible
ControlCode is an independently operated software service. For privacy questions or requests, contact aim.reader423@gmail.com.
2. Information we collect
- Account information, such as your email address, authentication identifiers, and sign-in status.
- Learning activity, such as challenge progress, submissions, controller parameters, simulation results, and engineering-lab activity.
- Billing-related identifiers and subscription status supplied by Paddle. We do not receive or store your full payment-card number.
- Technical and security information, such as request metadata, IP address, browser information, error records, and abuse-prevention signals.
- Messages and support information that you choose to send to us.
3. How we use information
- Provide accounts, simulations, progress tracking, submissions, engineering labs, and paid entitlements.
- Authenticate requests, prevent abuse, protect the service, and investigate technical problems.
- Manage subscriptions, reconcile billing state, provide support, and comply with legal obligations.
- Understand aggregate product performance and improve the learning experience.
4. Service providers and sharing
We share information only as needed to operate the service, including with:
- Supabase for authentication and application data storage.
- Paddle as merchant of record for checkout, payments, tax, receipts, subscription management, and buyer support.
- Vercel and other infrastructure providers that host and deliver the application and its supporting services.
- Authorities or professional advisers when required by law or reasonably necessary to protect rights, safety, and security.
We do not sell your personal information.
5. Legal grounds and international processing
Depending on your location, processing is based on performing our contract with you, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. Providers may process information in countries other than your own and use their contractual or legal transfer safeguards.
6. Retention
We retain account and learning information while your account is active and for a reasonable period afterward when needed for recovery, security, disputes, or legal compliance. Billing and transaction records may be retained for legally required periods. Data that is no longer needed is deleted or de-identified where practical.
7. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection regarding your personal information. You may also withdraw consent where processing relies on consent. Send requests to aim.reader423@gmail.com; we may need to verify your identity before acting.
8. Security, cookies, and updates
We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security. The service may use essential browser storage or cookies for authentication, security, and preferences. We will update this policy when our practices materially change and identify the current version using the date above.