Privacy Policy
CYOBot uses learner account details to provide sign-in, details from contact messages to respond to you, and subscription details to send email updates when you opt in.
Contact messages
Our contact form collects your name, email address and message. We store them in Supabase so our team can respond. An email alert tells our team that a submission arrived; that alert contains a submission ID and time, not your message or contact details. We remove contact submissions after one year.
Email updates
If you explicitly subscribe, we store your name, email address and consent time in Supabase. We use Resend to send a welcome email and future updates. You can unsubscribe through the link in the welcome email. Unsubscribing removes your subscription record.
Abuse prevention and hosting
Cloudflare Turnstile checks form submissions for abuse. We use a short-lived rate-limit record based on a protected hash of your IP address. Supabase stores form records and public download files. Vercel hosts this website. Preview versions of the site use the same form database and email service.
Robotics Quest learner accounts
Learner sign-in uses Supabase Auth with Google, GitHub, an email link or a password. Google and GitHub share your basic account identity, email address and profile details with Supabase so we can sign you in. Google sign-in requests only your Google account identity, email address and basic profile; we do not request access to your Google files, contacts or other Google services. We do not ask for your provider password. Supabase handles email/password credentials and account recovery, and Resend delivers authentication emails. Supabase may link identities using the same verified email address to one learner account.
We store your Supabase user ID, optional display name, age and terms confirmation times, and terms version in our Supabase database. The app uses session cookies to keep you signed in.
Quiz answers and results
Before sign-in, a quiz draft stays in your browser tab for up to 24 hours. A signed, short-lived cookie carries completed answers through sign-in. Once you finish, we save each completed set of ten answers, its rule version, score matches, and time in Supabase. Only your signed-in account can request its latest result through our application. We keep attempts while your learner account is active so you can retake the quiz and see your latest result.
Deletion and retention
To request deletion of your learner account, profile, and saved quiz attempts, email team.cyobot@gmail.com from your account email. We verify requests before deleting data. Supabase and Vercel may retain limited backups and operational logs under their own retention schedules. We do not use quiz answers for marketing email signup.
Contact us
For privacy questions, email team.cyobot@gmail.com.