Privacy Policy

1. Who We Are

Cubespotting is operated by P2P.AI, Inc. This policy explains what we collect, why, and what we do with it.

2. Information We Collect

Account information

When you sign in with Google we receive your email address, your name, and your profile picture. We use the email to identify your account. Your public name on Cubespotting is a handle you pick from ones we offer, not your Google name.

Learning activity

Which cubes you join, which cards you see, how you answer them, and when. This is how a cube knows what day you are on, and how a spot is earned.

Sponsorships and payments

If you sponsor a cube, we keep the sponsorship (the cube, the number of spots, the amount per spot, the name you gave) and a reference to the Stripe payment. Card details go to Stripe and never reach us.

Earnings

Every spot that pays you is a row in your ledger: the cube, the amount, the sponsorship it came from, the date. Your balance is the sum.

Usage data

Standard server logs: pages requested, timestamps, browser type, IP address. We use these to keep the service running and to find problems.

3. How We Use Your Information

• To run your cubes and deal the day's cards
• To pay spots into your balance
• To show sponsors how many spots have been won
• To show leaderboards and cube activity, by handle
• To send the one notification we send: the evening reminder, if you have turned it on
• To keep the service secure and working

4. What We Share

With sponsors

A sponsor sees how many of their spots have been won. They do not see who won them, your email, or your answers.

With other spotters

Your handle, your avatar, and your cube activity (streaks, graduations, leaderboard positions) are visible to other signed-in spotters. Your email and Google name are not.

With service providers

We use Supabase to store data, Vercel to host the service, Google for sign-in, and Stripe for payments. Each processes only what it needs to do its job.

We do not sell your data

We don't sell personal information, and we don't run ads.

5. Data Retention

Your account, your cubes, and your ledger stay while your account exists. If you delete your account, we remove your personal information within 30 days; the sponsorship and earnings records we must keep for accounting are kept without your identity attached.

6. Your Rights

You can see and change your profile in the app. You can ask us for a copy of your data, or to delete your account, through the app. Where local law gives you further rights, those apply.

7. Security

Data is encrypted in transit and at rest with our providers. Sign-in is a signed, HTTP-only session cookie. No system is perfectly secure, and we'll tell you if a breach affects you.

8. Children

Cubespotting is not directed at children under 13, and we don't knowingly collect their information.

9. Changes to This Policy

We may update this policy. We'll note the date at the top of this page.

10. Contact

Questions about privacy? Contact us through the app.