Privacy Policy
Last updated: April 2026
Overview
LatentGravity ("we", "us", "our") operates the website at latentgravity.io ("the Service"). This policy explains what data we collect, why we collect it, and what rights you have over it.
We believe privacy policies should be readable, not impenetrable. If anything is unclear, contact us at grantnagelnz@gmail.com.
1. What We Collect
Account information
When you create an account, we collect your email address and a hashed password. Your email is stored in our database and used for authentication, account recovery, and (if you opt in) notifications.
Payment information
If you subscribe to LatentGravity Pro, payment processing is handled entirely by Stripe. We never see, store, or process your card number, CVV, or full billing details. We receive only a Stripe customer ID and subscription status to manage your access tier.
User preferences and activity
We store data you actively provide, including:
- Teams you follow
- Notification preferences
- Game votes (drama score ratings)
- Game flags (crowdsourced tags)
Analytics and usage data
We use PostHog to understand how people use the Service. PostHog collects:
- Page views and navigation patterns
- Custom events (e.g. games viewed, highlight cards flipped)
- Web vitals (page load performance)
- Feature flag evaluations
- Device type, browser, and approximate location (from IP)
PostHog uses cookies and localStorage to maintain session continuity. For logged-in users, we link analytics data to your account to improve the experience. Anonymous visitors are tracked with a random device identifier only.
Session recordings
We use PostHog session recordings to replay user sessions and diagnose issues. These recordings capture mouse movements, clicks, scrolls, and page content — but all text inputs are masked. We do not record passwords, email content typed into forms, or any sensitive input fields.
Error tracking
We use Sentry to capture and diagnose application errors. When an error occurs, Sentry may collect technical details such as browser version, operating system, the URL where the error happened, and a stack trace. No personal data is intentionally sent to Sentry.
2. How We Use Your Data
- Providing the Service — authenticating your account, managing subscriptions, delivering personalised content (followed teams, notifications).
- Improving the product — understanding usage patterns, identifying bugs, measuring feature adoption, running A/B tests.
- Communication — sending account-related emails (verification, password reset). We do not send marketing emails unless you explicitly opt in.
3. Service Providers
We share data with the following third-party services, solely to operate the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Account data, user preferences |
| Stripe | Payment processing | Email, subscription details |
| PostHog | Product analytics | Usage events, device info, session recordings |
| Sentry | Error tracking | Technical error details |
| Vercel | Hosting and deployment | Request logs, IP addresses |
We do not sell, rent, or share your personal data with any other third parties for their own marketing or commercial purposes.
4. Cookies and Tracking
The Service uses cookies and localStorage for:
- Authentication — Supabase session cookies to keep you logged in.
- Analytics — PostHog uses a cookie and localStorage entry to identify your device across sessions. For logged-in users, this is linked to your account profile.
- Feature flags — PostHog stores feature flag states locally to ensure a consistent experience.
We do not use third-party advertising cookies. There are no ad networks on the Service.
5. Data Retention
We retain your account data for as long as your account is active. Analytics data is retained in PostHog according to their standard retention periods. Session recordings are automatically deleted after 30 days.
If you delete your account, we will remove your personal data from our database within 30 days. Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked back to you.
6. Data Security
We take reasonable measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls on our database. However, no system is perfectly secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on where you live, you have certain rights regarding your personal data:
All users
- Access — request a copy of the personal data we hold about you.
- Correction — update or correct inaccurate data via your account settings.
- Deletion — request deletion of your account and associated data.
- Opt out of analytics — you can disable PostHog tracking by enabling your browser's "Do Not Track" setting or using a browser extension to block analytics scripts.
European Economic Area (GDPR)
If you are located in the EEA, our legal basis for processing your data is: (a) performance of a contract (providing the Service you signed up for), (b) legitimate interest (product improvement via analytics), and (c) consent (where applicable, such as optional notifications). You also have the right to data portability and to lodge a complaint with your local data protection authority.
California (CCPA)
California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the email below.
New Zealand (Privacy Act 2020)
New Zealand residents may request access to and correction of their personal information under the Privacy Act 2020. If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner.
8. Children
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will notify you by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
If you have questions about this policy, want to exercise your data rights, or have any privacy concerns, contact us at: