Privacy Policy

1. Information We Collect

This list details the categories of Personal Data that we collect and have collected over the past 12 months:

Profile or Contact Data

• Email address
• Username and (optional) account identifiers, such as leaderboard name or user-set name.
• Password and authentication information (if signed up using credentials, instead of third-party integration such as Google)

The minimal account setup is simply an email, provided via supported third-party integrations.

Categories of Third Parties With Whom We Share this Personal Data: Service Providers, Parties You Authorize, Access or Authenticate

Payment Data

• Payment card type and last 4 digits
• Billing address, phone number, and email
• Payment processing information (processed by Stripe - we do not store full card details)

Categories of Third Parties With Whom We Share this Personal Data: Service Providers (specifically our payment processing partner, Stripe)

Device/IP Data

• IP address
• Device ID and type
• Operating system and browser information
• Domain server information

Categories of Third Parties With Whom We Share this Personal Data: Service Providers, Parties You Authorize, Access or Authenticate

Web Analytics and Usage Data

• Page views and user interactions
• Time spent on different sections of the Service
• Question attempts and progress tracking
• Feature usage statistics
• Performance metrics for service improvement and user benchmarking

Categories of Third Parties With Whom We Share this Personal Data: Service Providers, Parties You Authorize, Access or Authenticate

Other Identifying Information that You Voluntarily Choose to Provide

• Information in emails or messages you send us
• Feedback and survey responses
• Community forum posts and interactions

Categories of Third Parties With Whom We Share this Personal Data: Service Providers, Business Partners, Parties You Authorize, Access or Authenticate

2. Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

You

• When you provide such information directly to us:
• When you create an account or use our interactive tools and Service
• When you voluntarily provide information through the Service or surveys (our contribution page).
• When you send us an email or otherwise contact us
• When you use the Service and such information is collected automatically:
• Through Cookies and similar tracking technologies
• Device information when you access our Service
• Usage data and analytics information

Third Parties

• Vendors: We may use analytics providers to analyze how you interact and engage with the Service, or third parties may help us provide you with customer support
• Payment Processors: Information from Stripe related to payment processing

3. How We Use Your Information

• Provide access to interview questions and premium features
• Process payments through Stripe
• Track user progress and interactions
• Improve our service through analytics
• Provide customer support

Legal Basis for Processing

• Contract Performance: Processing necessary to provide the Service you purchased
• Legitimate Interest: Analytics and service improvement
• Consent: Optional features and communications

4. Data Sharing and Third Parties

We work with the following trusted third-party services:

• Stripe: For payment processing (PCI DSS compliant)
• Discord: For community access and engagement

We do not sell, rent, or share your personal information with other parties except as described in this policy or as required by law.

5. Data Storage and Security

• Your data is stored securely using industry-standard encryption. All credentials are salted and hashed, we store nothing sensitive in plaintext.
• Payment information is handled exclusively by Stripe, not stored by us
• User progress and interactions are stored to enhance your experience
• Daily database backups are created and stored elsewhere.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request limitation of processing

To exercise these rights, contact us at support@getcracked.io.

7. Data Retention

• User data and progress: Retained for account management
• Payment records: Retained as required by tax and legal obligations
• Analytics data: Retained in aggregated, anonymized form
• You can request deletion of your data at any time

8. Cookies and Tracking

• We use essential cookies for authentication and service functionality
• Analytics tools use privacy-focused tracking methods with anonymized data collection and respects user privacy preferences
• No third-party advertising cookies are used
• You can control cookie preferences in your browser settings

9. Data Breach Notification

• In the event of a data breach affecting your personal information, we will notify you within 72 hours when feasible
• Notifications will be sent to your registered email address
• We will provide details about the breach, affected data, and steps we are taking to address it

10. International Data Transfers

Your data may be processed in countries outside the United States. We ensure appropriate safeguards are in place, including standard contractual clauses and adequate data protection measures where applicable.

11. Changes to This Policy

• We may update this Privacy Policy from time to time
• Changes will be posted at https://www.getcracked.io/privacy
• Continued use after changes indicates acceptance

13. Contact Information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at:

• Email: support@getcracked.io
• Address: GetCracked, 1210 S Indiana Avenue, Chicago, IL 60605