Privacy Policy

This Privacy Policy explains what information WildBranch collects, how we use it, and the choices you have. We try to keep our practices minimal, consistent with running the service.

1. Data We Collect

Account data: email address, hashed password, username, account creation date, age-confirmation status.

Product data: reading progress, story choices, card collection, credit balance and redemption history.

Technical data: IP address (used for geo-restriction checks and fraud prevention, not retained long-term), browser type, device type, and referring URL.

Cookies: see the Cookie Policy for the specific cookies we set.

We do not knowingly collect data from minors. We do not collect or request payment-card data directly; payments are processed by Gumroad.

2. How We Use It

• To provide and operate the service (authentication, reading progress, purchase history).
• To personalise your experience (resuming where you left off, showing earned cards).
• To comply with legal obligations (age verification, geo-restriction, tax reporting where applicable).
• To understand usage in aggregate so we can improve the service.
• To communicate with you about your account (confirmation emails, security notices, service announcements you have not opted out of).

3. Third-Party Services

We use the following third parties to operate the service. Each has its own privacy policy governing its use of your data:

• Supabase — authentication, database, and storage infrastructure.
• Gumroad — payment processing for credit packs.
• Vercel — hosting and content delivery.

4. Cookies

We use strictly necessary cookies for authentication and age confirmation. Functional cookies (theme, reading position) are set after your consent. Analytics cookies, if present, can be declined from the cookie banner. See our Cookie Policy.

5. Data Retention

We retain account data for as long as your account is active and for up to 90 days after deletion to resolve disputes, enforce our Terms, and comply with legal obligations. Reading progress and card-collection data are deleted when your account is deleted. Technical logs (IP address, request metadata) are retained for up to 30 days for security purposes. Aggregated, de-identified analytics may be retained for up to 24 months.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@wildbranch.app. Account deletion is also available from your account settings and takes effect within 30 days.

7. GDPR (EU / UK Users)

If you reside in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation, including the right to:

• Access your personal data and receive a copy in a portable format.
• Rectify inaccurate data or complete incomplete data.
• Erase your personal data (the “right to be forgotten”).
• Restrict or object to our processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your national supervisory authority.

We process your personal data on the legal bases of contract performance (to provide the service you requested), legitimate interest (security, fraud prevention, service improvement), and consent (for analytics and non-essential cookies).

8. CCPA (California Users)

California residents have the right to know what categories of personal information we collect, the purposes for which we use it, the categories of third parties with whom we share it, and to request deletion. You also have the right not to receive discriminatory treatment for exercising these rights.

WildBranch does not sell personal information and has not done so in the preceding 12 months. To exercise your rights, email hello@wildbranch.app.

9. Children's Privacy

WildBranch is intended only for adults (18+). We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us data, contact hello@wildbranch.app.

10. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS), hashed passwords, and server-side access control. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

11. Changes

We may update this Privacy Policy from time to time. The “last updated” date at the top reflects the most recent revision. Material changes will be notified by email or in-site notice where possible.

12. Contact

Privacy inquiries: hello@wildbranch.app