Privacy Policy for Smash Trainer Website

Last updated: October 17th, 2023

1. Introduction

Welcome to Smash Trainer. This privacy policy applies to our website and related services. We respect your privacy and are committed to protecting your personal data.

2. Data We Collect

We collect data for specified, explicit, and legitimate purposes. We may collect, use, store, and transfer the following kinds of personal data:

Identity Data (Mandatory): Includes names as provided by your OAuth provider (Google, Discord, or GitHub). This is essential for providing you with our services.
Contact Data (Mandatory): Includes email addresses. Automatically collected through OAuth with Google, Discord, or GitHub.
Technical Data (Automatically Collected): Includes IP addresses, browser type, and other details of your visits to our website.
Content Data (Optional): Refers to any content you upload such as guides or exercises.
Interaction Data (Automatically Collected): Details of your interactions with content on our site, like clicks and views.

2.1 Google OAuth User Data Handling

When you log in through Google OAuth, we collect your name, email address, and profile photo. This data is used exclusively for the purposes of authentication, creating your profile on our service, and for displaying your name and profile photo on any user-generated content you might create on our platform. Your email address is not made public.

All data collected via Google OAuth is stored in databases located in the United States and will remain stored until you request its deletion. For information on how to delete your data, please refer to the "User Rights and Data Management" section.

Please note that by logging in through Google OAuth, you are consenting to this data collection and storage process as outlined in this section.

2.2 Discord OAuth User Data Handling

When you log in through Discord OAuth, we collect your username, discriminator, ID, avatar, and email. This data is used for authentication, creating your profile on our service, and for displaying your username and avatar on any user-generated content you might create on our platform. Your email address is not made public.

This data is stored in databases located in the United States and will remain stored until you request its deletion. For information on how to delete your data, please refer to the "User Rights and Data Management" section.

By logging in through Discord OAuth, you are consenting to this data collection and storage process as outlined in this section.

2.3 GitHub OAuth User Data Handling

When you log in through GitHub OAuth, we collect your username, avatar, and email. This data is used for authentication, creating your profile on our service, and for displaying your username and avatar on any user-generated content you might create on our platform. Your email address is not made public.

By logging in through GitHub OAuth, you are consenting to this data collection and storage process as outlined in this section.

3. How We Collect Your Data

We collect your data through various means:

Direct Interactions: For example, you might manually register on our platform.
OAuth Providers: We also collect data when you log in through OAuth providers such as Google, Discord, and GitHub. For details, refer to sections 2.1 Google OAuth User Data Handling, 2.2 Discord OAuth User Data Handling, and 2.3 GitHub OAuth User Data Handling.
Automated Technologies: Such as cookies, which store user preferences.
Third-Party Providers: Like Google Analytics and Vercel Analytics. Users can opt-out of third-party analytics via their respective settings.

Regardless of the method, we always collect your data for specified, explicit, and legitimate purposes as outlined in this Privacy Policy.

4. Use of Your Data

We use your personal data for a variety of purposes, each of which is necessary for different reasons. Below we explain these purposes in detail:

Account Management: We use your name and email address, as collected from your chosen OAuth provider (Google, Discord, or GitHub), to identify you within our services and facilitate account management.
Personalization: We may use your interaction data to personalize the content we present to you, thereby enhancing your user experience.
Communication: Subject to your explicit consent, we may use your email address to send you newsletters and updates related to our services.
Advertising: Again, with your explicit consent, we may use data analytics to display advertising content that may be of interest to you.
User-generated content: If you post any user-generated content, your name and profile photo (as provided by OAuth) will be visible to other users. Your email will remain private.

If you have any questions about how we use your data, or if you wish to withdraw your consent for any of the optional purposes, please contact us at admin@smashtrainer.com.

5. Data Sharing and Third Parties

While we do not sell your personal data, we use third-party analytics tools such as Google Analytics and Vercel Analytics, which may collect data for their own purposes. You can opt out from third-party analytics in their respective settings.

6. Data Security

Protecting your data is of paramount importance to us. We implement a variety of security measures to maintain the safety of your personal information:

Access Control: Only authorized personnel have access to personal data, and they are required to keep the information confidential.
Regular Audits: We periodically review our system for vulnerabilities and update security protocols as necessary.
Cloud Storage: Data is securely stored in the United States on cloud servers provided by Vercel, which adhere to industry-standard security protocols.
Incident Response Plan: We have measures in place to identify, respond to, and mitigate any potential data breaches.

While we strive to protect your personal information, no method of transmission or storage is 100% secure. Should a data breach occur that may impact your data, we are committed to informing you promptly.

7. User Rights and Data Management

You have several rights concerning your personal data under applicable law. These include the right to:

Access: You can request a copy of the personal data we hold about you.
Correct: You can request any incorrect personal data we hold about you to be corrected.
Delete: You can request for your personal data to be deleted. This is not an absolute right and depends on legal obligations and legitimate business needs.
Object or Restrict Processing: In certain circumstances, you have the right to object to the processing of your personal data or to restrict its processing.
Consent Withdrawal: Where processing is based on your consent, you can withdraw this consent at any time, without affecting the legality of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at admin@smashtrainer.com. We will respond to your request within a reasonable time frame, in accordance with applicable laws. Please note that changes might not be immediate due to technical constraints.

8. Children's Privacy

We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to register or send any information about yourself to us.

9. Cookies and Tracking

We use cookies and similar tracking technologies for authentication and to store user preferences. You can disable cookies in your browser settings but some features may not function as intended.

10. International Users

Our primary audience is within the US. If you access our services from outside the US, your data may be processed in countries with varying privacy regulations. By using our services, you consent to such processing.

11. Changes to This Privacy Policy

We reserve the right to update or change our privacy policy. Any updates will be posted on this page, and where appropriate, notified to you via email.

12. External Links and User-Generated Content

Our website contains both user-generated content and links to external sites:

External Links: Our website may include hyperlinks to external websites not controlled by us. We are not responsible for the privacy practices or the content of such external websites. We encourage you to read their privacy policies and terms of service.
User-Generated Content: The website may allow users to post content like guides or exercises. Please be aware that any information you choose to disclose in these areas becomes public information. Exercise caution when deciding to disclose your personal information.

If you have any questions or concerns regarding this section, please contact us at admin@smashtrainer.com.

13. Contact Us

For any privacy-related questions or concerns, you can reach out to us at admin@smashtrainer.com.