Privacy Policy

1. Introduction

The Codex ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Platform. We take anonymity seriously — your real identity is never shared with other users.

2. Information We Collect

Information you provide:

• Email address (used for account authentication only)
• Codename (your anonymous identity on the Platform)
• Payment information (processed by Stripe, we never store card details)
• Community posts, comments, and field reports you submit
• Field manual entries and mission completions

Information collected automatically:

• Usage data and page views
• Device type and browser information
• IP address (used for security purposes only)
• Cookies and session data

3. How We Use Your Information

• To provide and maintain the Platform and your account
• To process subscription payments via Stripe
• To display your codename and activity in community forums
• To track your XP, badges, and mission progress
• To send transactional emails (password reset, subscription receipts)
• To improve the Platform based on usage patterns
• To detect and prevent fraud and abuse

We do not sell your personal information to third parties. Ever.

4. Anonymity & Community

The Codex is built around anonymous participation. Other users only ever see your codename — never your real name, email address, or any personally identifying information.

Your email address is used solely for authentication and transactional communications. It is never displayed publicly or shared with other members.

Field reports and community posts are associated with your codename only. You control what personal details you choose to share in your posts.

5. Data Storage & Security

Your data is stored securely on Supabase infrastructure hosted on AWS. We implement industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and access controls.

Payment processing is handled entirely by Stripe, a PCI-compliant payment processor. We never store or have access to your credit card information.

6. Third Party Services

We use the following third-party services:

• Supabase — database and authentication
• Stripe — payment processing
• Vercel — hosting and content delivery
• Anthropic — AI Wingman functionality

Each of these services has their own privacy policy governing their use of your data. We encourage you to review them.

7. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies.

You can disable cookies in your browser settings, but this may prevent you from logging in or accessing certain features.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@thecodex.com

9. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

Community posts and field reports may be retained in anonymized form after account deletion to preserve the integrity of community discussions.

10. Children's Privacy

The Codex is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or concerns, contact us at privacy@thecodex.com