PRIVACY POLICY

Last updated: April 2, 2026

ShiftGlitch ("we", "our", "us") is a cyberpunk-themed study platform built for students. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using ShiftGlitch you agree to the practices described here.

// 1. INFORMATION WE COLLECT

We collect the following categories of information:

• Account information: When you sign in via Replit Auth (Google, GitHub, Apple, X, or Email), we receive your display name, email address, and profile picture URL from the identity provider.
• Waitlist data: If you join our waitlist, we store your chosen alias (gamertag) and email address.
• Payment data: When you purchase a Netrunner Pro pack, payments are processed by PayFast (ZAR). We do not store full card numbers or bank details — we only store a payment reference ID, your membership tier, and your Pro expiry date.
• Usage data: We collect anonymised page-view counts for analytics (home, pricing, waitlist, demo). No personally identifiable information is associated with these counts.
• App data: Study session data (flashcards, pomodoro logs, blurt sessions, WIL notes) is stored locally in your browser via localStorage. If cloud sync is enabled, this data is stored in Firebase under your user ID.

// 2. HOW WE USE YOUR INFORMATION

• To authenticate you and maintain your session.
• To send waitlist confirmation and access notification emails.
• To manage your Pro membership status and expiry date.
• To operate the leaderboard and squad features (gamertag is publicly visible if you opt in).
• To improve the platform using aggregated, anonymised analytics.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

// 3. DATA STORAGE AND SECURITY

Your account data is stored in a PostgreSQL database hosted on Replit's infrastructure. Sessions are managed server-side and expire after inactivity. We use HTTPS on all connections. Passwords are never stored — authentication is handled entirely by third-party identity providers.

// 4. THIRD-PARTY SERVICES

ShiftGlitch integrates with the following third-party services, each with their own privacy policy:

• Replit Auth — authentication provider
• PayFast (payfast.co.za) — ZAR payment processing
• Resend (resend.com) — transactional email delivery
• Google Analytics 4 (analytics.google.com) — website analytics, only activated with your consent. See Google's Privacy Policy.
• Google Fonts — typography
• Google Gemini API (optional) — AI features, only if you provide your own API key or the server key is configured

// 5. COOKIES, LOCAL STORAGE AND CONSENT

We use a single session cookie to maintain your login state. No advertising or third-party tracking cookies are used. When you visit ShiftGlitch for the first time, you will be shown a consent banner asking whether you agree to analytics data collection via Google Analytics 4. If you decline, no analytics data is collected. Your preference is saved in your browser's localStorage and can be changed by clearing your browser data. Study data stored in localStorage remains on your device and is not transmitted to our servers.

// 6. YOUR RIGHTS

You have the right to:

• Request a copy of the personal data we hold about you.
• Request deletion of your account and associated data.
• Withdraw consent for email communications at any time by contacting us.

To exercise any of these rights, email us at admin@shiftglitch.com.

// 7. DATA RETENTION

We retain your account data for as long as your account is active. Waitlist entries are retained until you are admitted or request removal. Payment references are retained for financial record-keeping as required by law.

// 8. CHILDREN'S PRIVACY

ShiftGlitch is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at admin@shiftglitch.com.

// 9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated date at the top of this page. Continued use of ShiftGlitch after changes constitutes acceptance of the updated policy.

// 10. CONTACT

If you have any questions about this Privacy Policy, contact us at admin@shiftglitch.com.