1. Who We Are (Controller)

Math Sheet Web is the controller responsible for your personal data. Contact: privacy@mathsheetweb.example.

2. What Data We Collect

• Account data: username, email, password hash, settings, subscription tier.
• Service data: worksheets, equations, references, share tokens, ratings and interactions.
• Usage data: device/browser info, IP address, logs, approximate location derived from IP, cookies.
• Social login data: basic profile info (e.g., email, name, ID) provided by your chosen provider.

3. Sources

We collect data directly from you, from your use of the Service, and (if used) from social login providers you authorise.

4. Purposes and Legal Bases

• Provide and secure the Service (account creation, authentication, storage, routing, gameplay): performance of a contract (GDPR Art. 6(1)(b)).
• Improve, debug and protect the Service (analytics, abuse prevention, security logs): legitimate interests (Art. 6(1)(f)).
• Communications about the Service (transactional emails): contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)).
• Optional marketing communications: consent (Art. 6(1)(a)) where required; you can withdraw at any time.
• Legal compliance (e.g., tax, fraud prevention): legal obligation (Art. 6(1)(c)).

5. Sharing

We share data with service providers (hosting, storage, email, analytics) under contracts that protect your data; with other users when you choose to share or publish content; and with authorities where required by law. We do not sell personal data.

6. International Transfers

Where data is transferred outside the EEA/UK, we use appropriate safeguards, such as the EU Standard Contractual Clauses or UK IDTA, unless a transfer mechanism or adequacy decision applies.

7. Retention

We keep personal data only as long as necessary for the purposes above. Account content is retained while your account is active and for a reasonable period afterwards for backup, audit and legal obligations. You may request deletion—see “Your Rights”.

8. Your Rights

• Access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

9. Cookies and Similar Technologies

We use cookies essential to provide the Service (e.g., session) and, where applicable, optional analytics or preference cookies. Where required, we will request consent for non‑essential cookies.

10. Social Logins

If you sign in with a third‑party provider, we receive limited profile information to authenticate you. Your use of the provider is governed by its terms and privacy policy.

11. Security

We implement appropriate technical and organisational measures to protect personal data. No method is 100% secure; please keep your credentials safe.

12. Children

The Service is intended for users 16+ (or the age required by local law). Do not use the Service if you are below the applicable age.

13. Changes

We may update this Privacy Policy. If changes are material, we will notify you as appropriate.

14. Contact

Contact our privacy team at privacy@mathsheetweb.example.