Privacy Policy

This policy explains what personal information WhoGotIn, operated by ACT Logic LLC, collects and what we do with it. We collect as little as we can.

• Email sign-ups: your email address, and the school page you signed up from, when you ask to be told about full reports.
• Accounts (when offered): your email address and sign-in details, handled by Firebase Authentication (Google). We never see your password.
• Purchases (when offered): what you bought and when. Card details go directly to Stripe and are never stored by us.
• Technical data: like any website, our hosting provider receives your IP address and browser details when you load a page, and may keep them briefly in server logs for security and troubleshooting.

We do not use cookies, analytics, or advertising trackers. The site stores two small settings in your browser's local storage (whether you closed the sign-up prompt, and a report display preference); they never leave your device.

Only to run the Service: to email you about the reports you asked about, to provide your account and purchases, and to keep the Service secure. Every email includes a way to stop receiving them.

We do not sell or share your personal information, as California law defines those terms, and we do not use it for advertising. We disclose it only to the service providers that run the Service for us (hosting, email delivery, and, when offered, Firebase and Stripe), who may use it only for that purpose, or when the law requires.

Email sign-ups are kept until you unsubscribe or ask us to delete them. Account and purchase records are kept while your account is open and afterward as long as tax and accounting law require.

Wherever you live, and as the California Consumer Privacy Act provides for California residents, you may ask us what personal information we hold about you, to correct it, or to delete it. Email [email protected] from the address concerned. We will not treat you differently for asking.

Email sign-ups, accounts, and purchases are for adults 18 and older. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we delete it. A parent who believes their child gave us information can email us.

The site is served over HTTPS and access to our data is restricted. No system is perfectly secure, and we cannot guarantee that it is.

We will post any change here with a new date. If a change materially affects how we use information you already gave us, we will email you first.