Privacy Policy

Who we are

SailQuiz is an online learning platform for RYA Day Skipper sailing theory. This privacy policy explains how we collect, use, and protect your personal data when you use our website and services.

What data we collect

We collect the following categories of personal data:

• Account data: email address, display name, and authentication provider (email/password or Google). Collected when you create an account.
• Learning data: course enrolments, quiz attempts and scores, review progress, daily goals, streaks, and XP. Collected as you use the platform.
• Preferences: study goals, target exam date, and cookie consent preferences.
• Waitlist data: email address and signup source, if you join the waitlist before creating an account.
• Feedback: name, email, category, message, and page URL when you submit feedback.
• Analytics data (opt-in only): if you consent to analytics cookies, we collect anonymous page views, feature usage events (e.g. quiz completed, course enrolled), device type, browser, country (derived from IP), and referring website. We do not collect your IP address in analytics — PostHog truncates it after geolocation.

Legal basis for processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): account data and learning data are processed to provide the learning service you signed up for.
• Consent (Art. 6(1)(a)): analytics cookies and associated usage data are only processed with your explicit opt-in consent. You can withdraw consent at any time via the “Cookie settings” link in the footer.
• Legitimate interest (Art. 6(1)(f)): essential cookies for authentication and security, and processing feedback to improve the service.

Cookies

We use essential cookies to keep you logged in and to remember your preferences. With your consent, we also use analytics cookies to understand how the site is used. You can manage your preferences at any time from the Cookie Policy page or via the “Cookie settings” link in the footer.

How we use your data

• Personalise your learning experience and track progress.
• Calculate scores, spaced repetition intervals, streaks, and daily goals.
• Understand how the platform is used (only with analytics consent) to improve features and fix issues.
• Respond to feedback and support requests.

We do not sell your data to third parties. We do not use your data for advertising or profiling.

Third-party services

We use the following third-party services to operate this platform:

• Supabase (EU) – Authentication and database services. Your account data and learning data are stored in Supabase's EU data centres. We may replace or supplement this provider in the future; any change will be reflected in this policy.
• PostHog (US, opt-in only) – Product analytics. Only activated with your explicit consent. Collects anonymous page views, feature usage events, device/browser info, and approximate country (IP is not stored). See PostHog's Privacy Policy
• Google (US) – OAuth authentication (only if you choose “Continue with Google”). See Google's Privacy Policy

International data transfers

Your account data is stored in Supabase's EU data centres. The website is hosted on a self-managed server in the EU. If you consent to analytics, anonymised usage data is processed by PostHog Inc. in the United States under standard contractual clauses (SCCs).

Data retention

• Account & learning data: retained for as long as your account is active. Deleted when you delete your account via Profile settings.
• Waitlist email: retained until launch or until you request removal.
• Analytics data: retained by PostHog for up to 12 months, then automatically deleted.
• Cookie consent preference: stored in a browser cookie for 1 year.

Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data — view your account data in Profile settings.
• Rectification — update your name and email in Profile settings.
• Erasure — delete your account and all associated data via Profile settings.
• Withdraw consent — revoke analytics consent at any time via the “Cookie settings” link in the footer.
• Data portability — request a copy of your data by contacting us.
• Lodge a complaint — you have the right to lodge a complaint with your local data protection supervisory authority (e.g. the UK ICO).

Contact

If you have questions about this privacy policy or want to exercise your data rights, please use the feedback form or email us at [email protected].