Privacy Policy

This policy explains what personal information WhoGotIn, operated by ACT Logic LLC, collects and what we do with it. We collect as little as we can.

• Email sign-ups: your email address, and the school page you signed up from, when you ask to be told about full reports.
• Accounts (when offered): your email address and sign-in details, handled by Firebase Authentication (Google). We never see your password. We also record when you accepted the Terms, when you created the account, when you last signed in and how often, and, if we ever have to suspend an account, the reason and any internal note about it.
• Purchases (when offered): what you bought and when, and the Stripe customer reference for your account. Card details go directly to Stripe and are never stored by us.
• Technical data: like any website, our hosting provider receives your IP address and browser details when you load a page, and may keep them briefly in server logs for security and troubleshooting.
• Usage statistics: we use Google Analytics to count visits and see which pages and features are used: pages viewed, searches made on the site, clicks on full-report links, and sign-ups (never your email address). Google Analytics sets first-party cookies and receives your IP address and browser details; it reports to us only in aggregate. We have turned off Google signals and ad personalization. You can opt out with Google's browser add-on (tools.google.com/dlpage/gaoptout) or by blocking cookies.

We use no advertising trackers. The site also stores two small settings in your browser's local storage (whether you closed the sign-up prompt, and a report display preference); they never leave your device.

Only to run the Service: to email you about the reports you asked about, to provide your account and purchases, to keep the Service secure, and to understand how the site is used so we can improve it. Every email includes a way to stop receiving them.

We do not sell or share your personal information, as California law defines those terms, and we do not use it for advertising. We disclose it only to the service providers that run the Service for us (hosting, email delivery, Google Analytics, and, when offered, Firebase and Stripe), who may use it only for that purpose, or when the law requires.

Email sign-ups are kept until you unsubscribe or ask us to delete them. Account and purchase records are kept while your account is open and afterward as long as tax and accounting law require. Google Analytics data is kept for 14 months and then deleted by Google.

Wherever you live, and as the California Consumer Privacy Act provides for California residents, you may ask us what personal information we hold about you, to correct it, or to delete it. Email [email protected] from the address concerned. We will not treat you differently for asking.

Email sign-ups, accounts, and purchases are for adults 18 and older. The Service is not directed to children, and we do not knowingly collect names, email addresses, or other contact details from anyone under 18. If we learn we have, we delete them. A parent who believes their child gave us information can email us.

Like any visitor, a student who reads the free pages is counted in the usage statistics described above: Google Analytics collects usage statistics from every visitor, identified only by a cookie and IP address, not linked to a name or email address, and never used for advertising.

We and our service providers process information in the United States. The Service is meant for people in the United States.

The site is served over HTTPS and access to our data is restricted. No system is perfectly secure, and we cannot guarantee that it is.

We will post any change here with a new date. If a change materially affects how we use information you already gave us, we will email you first.