1. Overview
This policy explains what personal data 59seconds.live collects and how we use it. Short version: we collect the minimum needed to run the game and honour past pack purchases - no ads, no selling of data, no tracking across other sites.
2. What we collect
- Account data - your email address and authentication details when you create an account or sign in.
- Purchase data - which packs you have unlocked, and transaction references from our payment provider. We never see or store your full card details.
- Word-list choices - if you use a Class Cookies subscription, which of your Class Cookies word lists you chose for which deck. The words themselves stay on Class Cookies.
- Technical data - standard server logs (IP address, browser type, requested pages) kept briefly for security and debugging.
3. Payments
We no longer sell packs (since 23 September 2026). Packs bought before then were paid through Paddle.com, our Merchant of Record. When you bought a pack, Paddle collected the billing information needed to process the payment under its own privacy policy, available at paddle.com/legal/privacy. We received confirmation of the transaction and the email used, so we could unlock your purchase, and Paddle still tells us about refunds on those orders.
4. How we use your data
- To sign you in and keep your unlocked packs attached to your account.
- To keep packs you bought unlocked, and to process refunds on them.
- To respond when you contact us for support.
- To keep the service secure and fix problems.
We do not sell personal data or use it for advertising.
5. Where your data lives
Account and purchase data is stored with Supabase (our database and authentication provider). The site is hosted on Vercel. Payments are handled by Paddle. Each of these providers processes data on our behalf under their own security and privacy commitments.
6. Cookies and local storage
We use browser storage only for functional purposes: keeping you signed in and remembering small preferences (for example, that you have already seen the how-to-play instructions). We do not use advertising or cross-site tracking cookies.
7. Retention and deletion
We keep account and purchase data for as long as your account exists, and purchase records as long as required for tax and accounting purposes. You can request deletion of your account and associated personal data by emailing us.
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us and we will respond within a reasonable time.
9. Children
The game is designed to be played in classrooms, but accounts and purchases are intended for adults (such as teachers). We do not knowingly collect personal data from children.
10. Contact
Privacy questions or requests: admin.59seconds@gmail.com.