Privacy Policy

Last Updated: 4th September 2025

This Privacy Policy explains how CAPlayground ("we", "us") collects, uses, and protects your information. It applies to your use of the CAPlayground website and application (the "Service").

1. Information We Collect

  • Local Projects: By default, your projects are stored locally on your device (e.g., browser localStorage). We do not receive your local projects unless you explicitly upload or share them.
  • Account Information: If you create an account via Supabase using email/password or Google OAuth, we process your email, necessary authentication identifiers (e.g., provider and user ID), and optional profile information required to operate the Service.
  • Device & Usage: Basic technical information such as device/browser type and interactions needed to operate the Service. We do not run third-party analytics unless stated here.
  • Cookies & Local Storage: We use necessary cookies/localStorage for session, preferences, and product features (e.g., first-time Terms acceptance: caplayground-tos-accepted).

2. How We Use Information

  • Provide and improve the Service and its features.
  • Authenticate users and secure accounts.
  • Prevent abuse and ensure the reliability of the Service.
  • Communicate important updates related to your account or the Service.

3. Aggregate-only Analytics

We record aggregate counts of certain in-product events to help us understand usage (for example, when a project is created). These analytics events do not include user identifiers, IP addresses, or device fingerprints, and we do not set analytics cookies for this purpose. The events are stored as simple counters with timestamps and are used to improve the Service.

4. Third Parties

We use Supabase for authentication and backend infrastructure. Supabase may process data necessary to provide those services and may maintain operational logs (e.g., auth events). Refer to Supabase documentation/policies for more details.

5. Data Retention

  • Local projects remain on your device until you remove them.
  • Account data is retained while your account is active. If you delete your account, we delete associated account data except where retention is required by law.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your data. We are planning an account deletion endpoint in the app. You can also contact us to exercise your rights.

7. Children’s Privacy

The Service is not intended for children under the age specified in our Terms of Service. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

8. International Transfers

Data may be processed in regions where our providers operate. We take steps to ensure appropriate safeguards consistent with applicable laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date above and, when appropriate, provide additional notice.

10. Contact

Questions? Contact us at support@enkei64.xyz.

See also our Terms of Service.