privacy policy

information we collect

when you create an account or sign in, we collect:

• account details — your email address and, if you sign in with google, your name as provided by your google account. we use google sign-in only to authenticate you; we do not access your contacts, drive, gmail, or any other google data.
• profile and activity — your display name, elo rating, solved count, the answers and solutions you submit, and their grading results.
• content you author — problems, rubrics, and images you upload if you contribute questions.
• usage data — anonymous, aggregated page-view analytics (via vercel analytics, which does not use cookies) and standard server logs.

how we use it

• to create and secure your account and keep you signed in.
• to grade submissions, calculate elo ratings, and show your progress.
• to display your display name, elo, and solved count on the public leaderboard.
• to operate, maintain, and improve the service and prevent abuse.

cookies and local storage

we use a strictly necessary authentication cookie to keep you signed in, and your browser's local storage to remember preferences such as theme and sidebar state. we do not use advertising or cross-site tracking cookies.

service providers

we do not sell your information. we share it only with providers that help us run mathleagues, and only as needed for that purpose:

• google firebase — authentication and data storage.
• supabase — database hosting.
• vercel — hosting and privacy-friendly analytics.
• openrouter and the ai model providers it routes to — to grade free-response submissions. only the problem and your submitted work are sent, not your email or account details.

we may also disclose information if required by law.

google user data

information received from google apis is used only to sign you in and set up your profile, and its use adheres to the google api services user data policy, including the limited use requirements. we do not use google user data for advertising or transfer it to others except as described above.

retention and deletion

we keep your information for as long as your account is active. you can ask us to delete your account and associated data at any time by contacting us (see below); we will delete it within 30 days, except where we must keep it to meet legal obligations.

security

data is encrypted in transit, access is restricted by authentication and database security rules, and grading and rating changes run only on our servers. no system is perfectly secure, but we work to protect your information.

children

mathleagues is not directed at children under 13, and we do not knowingly collect personal information from them. if you believe a child under 13 has created an account, contact us and we will delete it.

changes

we may update this policy from time to time. we will change the date above when we do, and for material changes we will notify signed-in users.

contact

questions or deletion requests? message us on x @mathleagues or instagram @mathleagues.