Gauth Privacy Policy

Your account. An email address, and a password if you did not sign in with Google. Authentication runs on Supabase, and passwords are stored and verified by Supabase rather than by us — we never see or hold one. If you sign in with Google, we also receive the name and profile picture on that Google account.

Problems and solutions. The text you type, any photo you attach, and the solution generated in response. For signed-in users these are saved to your history so you can find them again. If you send a photo, whatever is in the frame is stored with the problem, so do not photograph a page that has your name, student number, or anything else private on it.

Usage counters. Whether you have used your one free search. This is what enforces the free plan.

Anonymous solve records. Before you have an account, a free solution is recorded against a random identifier from a cookie, along with a truncated one-way hash of your IP address. The hash exists only to cap how many free solutions can come from one network. We do not store the raw address it was derived from and cannot reverse it.

Billing status.Stripe customer and subscription identifiers, which plan you are on, whether it is active, and when the current period ends. No card number, expiry date, or security code ever reaches our servers — those are entered on Stripe’s own checkout page.

Server logs. Our hosting provider records standard request logs that include IP addresses, for security and debugging. We do not build profiles from them.

To run the service, and for nothing else. Your email identifies your account and is how we reach you about it. Problems and solutions exist because the product is a solver with a history. Usage counters enforce the free tier. The hashed network fingerprint stops one person minting unlimited free solutions by clearing cookies. Billing status decides whether you see the paywall.

We do not use your problems to build an advertising profile, and we do not train models on them.

Your account and saved solutions stay for as long as your account exists. Delete the account and they go with it, although copies can persist for a short period in our database provider’s routine backups before those rotate out.

Anonymous solve records are kept only as long as they are useful for abuse prevention. They hold no name or email, and the network hash they carry is not reversible.

Billing records are held by Stripe for as long as tax and accounting rules require, independently of anything we delete on our side.

Four providers touch your data, each for one job:

Supabase hosts the database and handles authentication. Your account record, your saved solutions, and your usage counters live there.

Stripe processes payments. It holds your card details and billing address; we hold only the identifiers that let us ask Stripe whether your subscription is active.

Vercel hosts and serves the site, and produces the server logs described above.

Our AI provider receives the text and any image of each problem in order to generate the solution. This is the one place your content necessarily leaves our infrastructure, and it is worth knowing before you paste anything sensitive into a question.

There are two kinds on this site, and neither is for advertising.

Session cookies are set by Supabase when you sign in. They keep you signed in between pages and expire or refresh on their own. Blocking them means you cannot stay logged in.

The guest cookie is named gauth_guest. It holds a random identifier, is set for a year, and is marked HttpOnly so page scripts cannot read it. Its only job is to remember that this browser has had its free solution. It carries no personal information.

There is no advertising pixel, no analytics script, and no cross-site tracker on this site.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email team@gauth.io from the address on your account and say which of those you want. We will confirm the request and act on it within 30 days, usually much sooner.

Deletion removes your profile, your saved solutions, and your usage records. Cancel any active subscription first, from your account page, since deleting the account does not by itself stop a Stripe subscription.

Depending on where you live, you may also have the right to object to or restrict certain processing, to receive your data in a portable format, and to complain to your national data protection authority. Ask and we will help rather than make you argue for it.

Gauth is built for secondary and university-level study and is not intended for children under 13. If you are under the age at which you can consent to online services where you live, use it with a parent, guardian, or teacher. If you believe a child has created an account, email us and we will remove it.

When this policy changes, the date at the top changes with it. For a change that materially affects what we collect or who we share it with, we will say so on the site rather than quietly editing the page.

Privacy questions, access requests, and deletion requests all go to team@gauth.io. The terms of service cover billing, acceptable use, and the limits of what a generated solution is, and how Gauth works describes the path a problem takes through the system.