Privacy Policy

HumanCalc ("we," "us," or "our") operates the brain training platform at humancalc.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

HumanCalc is free to use and does not sell, rent, or share your personal information with advertisers or third-party marketers under any circumstances.

Account information (optional): If you create a free account, we collect your username, email address, and password (stored as a bcrypt hash — never in plaintext).

Google sign-in (optional): If you continue with Google, we receive your verified email address, display name, and Google account subject identifier. HumanCalc does not store Google access tokens or refresh tokens.

Game difficulty level (localStorage): Your current difficulty level for each exercise is stored in your browser's localStorage. This data never leaves your device unless you create an account.

Game progress (authenticated users only): If you are signed in, your game sessions (score, XP, timestamp) and highest achieved difficulty level per exercise are stored in our database.

Collection and competition: We store your points balance, cosmetic purchases, equipped items and earned season medals. Your selected avatar, displayed badges and competitive medals appear publicly with your leaderboard username. Coins can be earned by playing or bought in optional coin packs.

Coin purchases: Payments are handled by Polar (polar.sh), our merchant of record. Polar collects your payment details, billing address and tax information. We never see or store your card number. Polar shares your email address and order details with us. For each purchase we store the order id, product, coins credited, amount, currency, status and time, linked to your account.

Analytics: HumanCalc uses Google Analytics (GA4) and Google Tag Manager to understand aggregate usage patterns (e.g., page views, session counts). These tools may set cookies. We do not use advertising networks or social tracking pixels.

First-party usage records: For guests and signed-in players, we record page paths, navigation between pages, game starts, completions, abandoned runs, scores, run duration, screen-size category, referring domain and event time. A random browser identifier and a visit identifier connect these events. Signed-in activity and successful sign-ins are also linked to your account. These records are available only to the site administrator. We do not record typed answers, passwords, full referring URLs or IP addresses in these usage records. For each visit we also keep the country (a two-letter code such as TR) that our hosting provider derives from the request; the IP address itself is not stored. The public activity feed on the home and game pages shows recent finished runs without any name or identifier: only the game, the result, the visit's country flag and how many minutes ago it happened, plus a count of players in the last 24 hours.

We use the information we collect solely to:

• Authenticate your account (if you choose to create one)
• Persist your difficulty level across devices (signed-in users only)
• Credit, record and, if refunded, reverse coin purchases
• Respond to support requests you initiate
• Improve the platform using aggregate usage patterns and administrator-only session records

Neon: HumanCalc uses Neon (neon.tech) as its database provider. Neon is SOC 2 Type II certified and GDPR-compliant.

Authentication: HumanCalc supports password authentication and Google OpenID Connect. HumanCalc session tokens are stored in HTTP-only, Secure cookies and are never exposed to client-side JavaScript.

Payments: Coin packs are sold through Polar (polar.sh) as merchant of record. Polar processes the payment and its own privacy policy applies to the data it collects at checkout.

Hosting: HumanCalc is deployed on Vercel. Standard server access logs may be retained by Vercel for operational purposes.

No advertising networks or social tracking pixels are loaded on HumanCalc.

HumanCalc does not use advertising cookies. The browser storage and cookies we use are:

• localStorage keys to remember your current difficulty level and language preference between sessions.
• Authentication session cookie — set only if you sign in — to maintain your login state. This cookie is HTTP-only and Secure.
• First-party analytics cookies — a random browser ID lasts up to 90 days and a visit ID expires after 30 minutes of inactivity. These work for guests and accounts. Blocking these cookies may reduce measurement accuracy without preventing play.
• Google Analytics (GA4) cookies — used to measure aggregate usage patterns (page views, session counts). No personally identifiable information is shared with Google via these cookies. You can opt out via your browser's cookie settings or by using an ad blocker.

You may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request that we delete your account and all associated data.
• Correction: Request correction of inaccurate data.
• Portability: Request your data in a portable format.
• Objection: Object to processing of your data.

Account data is retained for as long as your account exists. If you delete your account, all personally identifiable information is removed from our database within 30 days.

HumanCalc is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

For privacy-related requests, please email info@humancalc.com.