CivicsMate

Privacy Policy

Protecting your personal data matters to CivicsMate. This policy describes the data we actually collect, how we use it, and your rights.

1. Data Controller

CivicsMate is the controller for the processing carried out on civicsmate.com. Contact: contact@civicsmate.com.

2. Data We Collect

We collect only the data needed to run the service:

  • Identification data: your email address and internal technical identifiers (user ID). No other civil-status data is required.
  • Progress data: scores, answers, correct and incorrect questions, learning statistics, and activity dates.
  • Subscription and billing data: the plan you chose, its status, the period end date, and your customer identifier at the payment provider. CivicsMate does not store any card or bank data.
  • Technical and security data: logs needed for security (IP address, browser type, timestamps) and strictly necessary cookies.

3. Purposes and Legal Bases

Your data is processed to:

  • Provide the service and manage your account and subscription (performance of the contract).
  • Improve the user experience, ensure security, and prevent fraud (legitimate interest).
  • Measure audience and advertising performance (legitimate interest, with the option to opt out at any time via the cookie banner).
  • Meet our legal and accounting obligations, including invoicing.

4. Retention

Account data is kept for as long as you use the service and then archived for up to three years for evidentiary purposes. Billing data is kept for the period required by accounting rules. Technical logs are kept for a limited period suited to security needs.

5. Sharing and Location of Data

Access to your data is limited to authorized people and to the processors we need: authentication (Clerk), payment (Stripe), transactional email (Resend), hosting (Vercel), database hosting (Hetzner), and audience and advertising measurement (Google). Each is bound by confidentiality and compliance obligations. Application data is hosted within the European Union; analytics and advertising measurement data is processed by Google LLC and may be transferred to the United States under appropriate safeguards (EU–U.S. Data Privacy Framework and standard contractual clauses). We do not sell your data.

6. Cookies

We use strictly necessary cookies required to operate the site, such as session management and security (including authentication via Clerk). We also use Google Analytics 4 cookies to measure how the site is used and Google Ads cookies (tag AW-17961965860) to attribute purchases to advertising campaigns. These measurement cookies are enabled by default; you can decline them via the cookie banner, and your choice is enforced through Google Consent Mode.

7. Security

We apply technical and organizational measures to protect your data: encryption of exchanges, access control, security logging, regular backups, and minimization of the data collected.

8. Your Rights

Under the GDPR, you have the rights of access, rectification, erasure, objection, restriction, and portability of your data, as well as the right to set instructions for your data after your death. You can manage email preferences from your profile. To exercise your rights, write to contact@civicsmate.com. Proof of identity may be requested in case of reasonable doubt.

9. Updates

This policy may change over time. Any material change will be indicated on the site, and the most recent online version prevails. See also our Legal Notice.