GSTYR

Privacy Policy

Last updated: March 28, 2026

1. Introduction

GSTYR ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Platform, you agree to the practices described here.

2. Information We Collect

2.1 Account Information

When you sign up, we collect your name, email address, and profile information through our authentication provider, Clerk. You may also provide a username, bio, and profile photo.

2.2 Content You Submit

We store video submissions, comments, messages, and other content you post on the Platform. Video files you upload directly are stored in Supabase Storage. Videos submitted via YouTube link are referenced by video ID only — the video remains hosted on YouTube.

2.3 Usage Data

We automatically collect information about how you use the Platform, including pages visited, challenges entered, votes cast, and interactions with other users. We also collect device information, browser type, and IP address.

2.4 Communications

If you contact us by email, we retain those communications to help resolve your request.

3. How We Use Your Information

We use your information to:

  • Operate and improve the Platform
  • Authenticate your identity and secure your account
  • Display your profile, submissions, and activity to other users as intended by the Platform
  • Send transactional emails (welcome, notifications, invitations) via Resend
  • Send our weekly challenge digest if you have opted in
  • Enforce our Terms of Service and Community Guidelines
  • Comply with legal obligations

4. Third-Party Services

We rely on the following third-party services to operate the Platform:

  • Clerk — authentication and user management. See Clerk's Privacy Policy at clerk.com/privacy.
  • Supabase — database and file storage. See Supabase's Privacy Policy at supabase.com/privacy.
  • LiveKit — real-time video streaming for live challenges. See LiveKit's Privacy Policy at livekit.io/privacy.
  • Resend — transactional email delivery. See Resend's Privacy Policy at resend.com/privacy.
  • YouTube — challenge reference videos are embedded from YouTube. See Google's Privacy Policy at policies.google.com/privacy.

We do not sell your personal information to third parties.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or business purposes.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, contact us at [YOUR CONTACT EMAIL].

7. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.

8. Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze Platform usage. See our Cookie Policy for details.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending an email. Your continued use after changes are posted constitutes acceptance.

11. Contact

For privacy-related questions or requests: [YOUR CONTACT EMAIL]

For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.