Privacy policy

Last updated: 2026-06-30

This policy explains what Moldavite ("the Service") collects, why, and the choices you have. We try to collect as little as possible.

1. What we collect

  • Account data — your email address and, if you sign in with Google, your name and avatar.
  • Content you create — prompts, uploaded source files, and the courses, lessons, and progress generated from them.
  • Usage analytics — see sections 2 and 3.

2. Analytics (cookieless)

We use Umami, a privacy-friendly analytics tool we host ourselves at umami.jan-kadlec.cz. It records aggregate page views, referrers, and coarse device info (browser, screen size, country). It sets no cookies, does not track you across other sites, and does not build an advertising profile. We rely on this minimal, cookieless data as a legitimate interest to understand and improve the Service; it does not identify you personally.

3. Session replays (consent required)

With your explicit consent, Umami also records anonymized session replays and heatmaps — a reconstruction of interactions like clicks and scrolls on a page — so we can find and fix confusing parts of the interface. Sensitive inputs are masked. This is off by default and only starts after you choose "Accept" on the consent banner.

You can withdraw consent at any time by clearing the moldavite-replay-consent entry in your browser's site storage (which brings the banner back), or by emailing us. Declining has no effect on your use of the Service.

4. Cookies and local storage

We use browser storage only for things that make the Service work: your sign-in token, your theme preference, and your analytics-consent choice. These are essential — there are no third-party advertising or tracking cookies.

5. Third parties

Some data is shared with processors only as needed to run the Service:

  • Stripe — payments and subscriptions. We never see or store your full card details.
  • Google — only if you choose "Sign in with Google".
  • Our AI provider — the prompts and source material you submit are sent to the configured large-language-model provider to generate your course.
  • Web Push services (Google/Mozilla/Apple/Microsoft) — only if you opt in to "course ready" notifications.

6. Data retention

We keep your account and content until you delete them or close your account. Analytics data is retained in aggregate. Deleting your account removes your personal data, subject to records we must keep for legal or accounting reasons.

7. Your rights

If you're in the EU/EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. To exercise any of these, email us and we'll respond within a reasonable time.

8. Contact

Questions or requests? jan@pricedog.app.