⚠ Internal notice: review with legal counsel before launch. Confirm PIPEDA obligations and Paddle data-sharing clauses.

Privacy Policy

Last updated: June 2026

1. Who We Are

SteamTicket is operated as a Canadian sole proprietorship. Our primary contact email is support@steamticket.ca. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information We Collect

We collect only what is necessary to provide the service:

Account information: email address and password (hashed), collected when you register or purchase.
Purchase information: order details provided to us by our payment processor Paddle (see section 5). We do not store card numbers.
Study progress: your quiz answers, scores, and session data, stored on your device (localStorage) and optionally synced to your account in our database.
Usage analytics: aggregate page-view data via Plausible Analytics (privacy-first, no cookies, no cross-site tracking, no personal identifiers collected).
Support correspondence: any email you send to support@steamticket.ca.

3. How We Use Your Information

To create and manage your account;
To verify your purchase entitlement and provide access to purchased course content;
To sync your study progress across devices when you are logged in;
To respond to support requests;
To send transactional emails (purchase confirmations, password resets). We do not send marketing emails without explicit consent.

4. Data Storage and Security

Account and progress data is stored in Supabase (hosted infrastructure with encryption at rest and in transit). We use industry-standard security measures. No system is completely secure; we cannot guarantee absolute security of transmitted data.

Study progress is primarily stored in your browser's localStorage and is only sent to our servers when you are logged in. You can clear your local data at any time through your browser settings.

5. Third-Party Services

Paddle (paddle.com): our merchant of record and payment processor. Paddle collects your name, email, and payment details to process your purchase. Paddle's Privacy Policy governs data Paddle collects.
Supabase (supabase.com): our backend database provider. Data is stored on Supabase infrastructure under their data processing terms.
Plausible Analytics (plausible.io): privacy-preserving analytics with no cookies and no personal data collection.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., tax records).

7. Your Rights (PIPEDA)

Under PIPEDA you have the right to:

Access the personal information we hold about you;
Request correction of inaccurate information;
Withdraw consent and request deletion of your account and personal data;
File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email support@steamticket.ca.

8. Cookies

SteamTicket does not use tracking cookies. Authentication uses a secure session token stored in localStorage. Plausible Analytics operates without cookies.

9. Children

SteamTicket is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page with a revised date. Continued use of the service after the update date constitutes acceptance of the revised policy.

11. Contact

Privacy questions? Email support@steamticket.ca.