Privacy Policy

1. Who we are

vscubing is an online platform for competing in virtual Rubik’s Cube–like puzzle simulators.

Contact (including data protection and deletion requests):
contact.vscubing@gmail.com

2. What data we collect

2.1 Account and authentication data

When you create an account or sign in, we process the following personal data:

• Email address
• OAuth provider identifier (e.g. Google provider account ID)
• Authentication session data (via in-house cookies)

This data is necessary to create and manage user accounts and to provide authentication.

2.2 World Cube Association (WCA) integration

Users may optionally link a World Cube Association (WCA) account to their vscubing profile. If you do so, we process:

• Your WCA ID
• Email address linked to the WCA accound

We may display publicly available WCA information (such as first name, last name, and profile picture) on your profile. This information is retrieved from the WCA and displayed on the website but is not permanently stored by us.

2.3 Analytics data

We use PostHog to understand how the platform is used and to improve stability, performance, and user experience. The following data may be processed:

• IP address
• Device and browser information
• Usage events (such as page views and interactions)

We do not use session replay, do not send email addresses to PostHog, and do not use feature flags. We only use PostHog's EU-based servers.

3. Legal basis for processing

We process personal data on the following legal bases under Article 6 GDPR:

• Contract necessity (Art. 6(1)(b)) — For account creation, authentication, and core platform functionality.
• Legitimate interest (Art. 6(1)(f)) — For analytics, where processing is necessary to improve the platform and ensure its reliability, while respecting user privacy and minimizing collected data.

4. Cookies and similar technologies

We use an in-house authentication cookie to maintain user sessions. This cookie is required for the operation of the website.

We do not use advertising cookies.

5. Third-party services

We use the following third-party services to operate the platform:

• Google OAuth – for user authentication
• World Cube Association OAuth – optional account linking
• PostHog – analytics (EU-hosted)

These services process personal data only as necessary to provide their functionality.

6. Data retention

Account data is stored for as long as your account exists.

Analytics data is retained for a limited period and deleted in accordance with our PostHog retention settings.

You may request deletion of your account and associated data at any time.

7. Your rights

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object to processing based on legitimate interest
• Right to data portability

To exercise your rights, contact us at: contact.vscubing@gmail.com

8. Data security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on the website.