Privacy Policy
Last updated: 11 July 2026. Plain language, because your privacy is the point.
The short version
Mettlr is built privacy-first. It's text-only. No microphone, no camera, no location, no screen-tracking, no advertising, no data selling. We collect the minimum needed to run your account, and you can delete everything at any time.Who we are
Mettlr ("we", "us") provides the Mettlr app at mettlr.app. For data-protection purposes we are the data controller, operated from Spain. For any privacy question or request, email [email protected].What we collect
- Playing as a guest: your progress is stored only on your own device (browser local storage). It never reaches our servers, and we can't see it.
- When you create an account: your email address, the display name you choose, and your sign-in method (email + password, a one-time code, a magic link, or Google).
- Your game data: quests completed, XP, ranks, stats, streaks, season progress, shards, and any guild you join.
- What you type into custom directives or quests.
- Reminders: if you turn on quest notifications, a push-subscription token for your browser or device.
- Basic usage analytics: pages viewed and key in-app events (for example, completing onboarding), collected in a privacy-friendly, cookieless way. It is not tied to advertising.
- Payments: if you subscribe, we store a payment-provider customer ID and your subscription status. We never see or store your card details.
How we use it
To run and sync your account across devices, keep the game working, send you account and reminder emails, generate the System's responses, process payments, keep the service secure, and improve the product. That's the whole list.Legal bases (GDPR)
We process your data to provide the service you asked for (contract), with your consent where consent applies (such as reminders), and for our legitimate interests in keeping the app secure and improving it. You can withdraw consent at any time.Who we share it with
We never sell your data. We use a small set of trusted providers ("processors") purely to run Mettlr, each under a data-processing agreement:- Supabase: database and authentication (stores your account and game data).
- Vercel: hosting and privacy-friendly, cookieless analytics.
- Stripe: payment processing and tax. Stripe handles your card details directly; we don't.
- Resend: sending account and reminder emails.
- Anthropic: generating the System's text responses (see "AI" below).
- Google: only if you choose to sign in with Google.
AI
When the live System is enabled, short pieces of text (like a quest title) may be sent to our AI provider, Anthropic, to generate a response. This text is not used to train AI models and is not retained beyond producing your message.If you sign in with Google
We only request your basic profile: your email address and name, used solely to create and manage your account. We do not use Google data for anything else, and our use complies with the Google API Services User Data Policy, including its Limited Use requirements.International transfers
Some of the providers above are based in the United States, so your data may be processed there. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.Cookies
We use only the cookies needed to keep you signed in. Our analytics is cookieless. We use no advertising or third-party tracking cookies.How long we keep it
We keep your data while your account is active. When you delete your account, we delete your personal data (some records may persist briefly in encrypted backups before they cycle out, and we keep the minimum payment records the law requires).Your rights
You can delete your account and its data at any time from within the app, or by emailing us. If you're in the EU, UK, or a similar region, you have full rights to access, correct, delete, export, restrict, and object to the processing of your data, and to complain to your local supervisory authority (in Spain, the AEPD). To exercise any of these, email [email protected].Security
Data is encrypted in transit, access is scoped so you only ever reach your own records, and card details never touch our servers. No system is perfectly secure, but we take it seriously.Age
Mettlr is for people 16 and older. It is not directed at children, and we don't knowingly collect data from anyone under 16.Changes
If we update this policy, we'll change the date above and, for significant changes, tell you in the app.Contact
Questions or requests? Email [email protected].This policy is written in plain language and reflects how Mettlr actually works. It is not legal advice.