Privacy Policy
Last updated: January 15, 2026
Tarsia.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at tarsia.ai (the "Service").
1. Information We Collect
Personal Information
When you create an account or use our Service, we may collect:
- Email address
- Name (if provided)
- Profile information from OAuth providers (Google)
- Payment information (processed securely by Stripe)
Usage Information
We automatically collect certain information when you use our Service:
- Device information (browser type, operating system)
- IP address and approximate location
- Pages visited and features used
- Puzzles created and interactions with the Service
Content You Create
We store the puzzles, questions, and answers you create or generate using our Service. This content is associated with your account and stored securely.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and manage your account
- Generate AI-powered puzzle content based on your requests
- Send you service-related communications
- Respond to your inquiries and provide support
- Analyze usage patterns to improve our Service
- Detect, prevent, and address technical issues or fraud
- Comply with legal obligations
3. Third-Party Services
We use trusted third-party services to operate our platform:
Supabase
Authentication and database services. Supabase stores your account information and puzzle data securely. Supabase Privacy Policy
Stripe
Payment processing. We do not store your payment card details; they are handled securely by Stripe. Stripe Privacy Policy
Anthropic (Claude AI)
AI-powered puzzle generation. When you use AI features, your topic prompts are sent to Anthropic's Claude API. Anthropic Privacy Policy
Vercel
Website hosting and analytics. Vercel provides our hosting infrastructure and basic analytics. Vercel Privacy Policy
Upstash
Rate limiting infrastructure. Upstash Redis helps us manage API rate limits to ensure fair usage. Upstash Privacy Policy
4. Cookies and Tracking
We use cookies and similar technologies to:
- Essential cookies: Required for authentication and basic functionality
- Analytics cookies: Help us understand how you use our Service
Google Analytics
We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 may collect the following information:
- Pages visited and time spent on each page
- Device type, browser, and operating system
- Geographic location (city-level, derived from IP address)
- Referring websites and search terms
- Interactions with site features (e.g., button clicks, form submissions)
Data retention: Analytics data is retained for 14 months, after which it is automatically deleted.
Data sharing: Your data is processed by Google LLC under their Data Processing Terms. We do not share personally identifiable information with Google. GA4 uses IP anonymization by default, meaning your full IP address is not stored.
Opt-out: You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google's Privacy Policy.
You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except as required by law or for legitimate business purposes (such as maintaining backup archives).
6. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
To exercise these rights, please contact us at privacy@tarsia.ai.
7. Children's Privacy
Our Service is intended for educators and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will take steps to delete such information.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
9. Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
By using Tarsia.ai, you acknowledge that you have read and understood this Privacy Policy.