Privacy Policy

1. Introduction

Gnit ("the Service") respects the privacy of its users and is committed to protecting personal information. This policy explains how we handle personal information collected through the Service.

2. Information We Collect

2.1 Account Information

• Display name (username)
• Email address
• Profile image (if provided by a connected sign-in provider)

2.2 Service Usage Data

• Contest participation records
• Submitted answers and correctness results
• Scores, deviation values, and other performance data

2.3 Technical Information

• IP address (for abuse prevention and rate limiting)
• Browser type and version
• Access timestamps

3. How We Use Your Information

Collected information is used for the following purposes:

• Providing and operating the Service
• User authentication, session management, and account operations
• Calculating contest scores and displaying rankings
• Improving service quality and preventing misuse
• Sending important service announcements

4. Third-Party Services

The Service uses the following external processors or providers where applicable. Authentication and session management themselves are handled on our Cloudflare-hosted infrastructure with Better Auth.

Blog publishing is operated on our own Cloudflare-hosted EmDash instance.

• Cloudflare (hosting / CDN / D1 / security) — application hosting, database infrastructure, DDoS protection, WAF, rate limiting, and edge delivery. Cloudflare Privacy Policy
• Stripe (payments) — checkout and payment processing for premium content. Stripe Privacy Policy
• Google Analytics (analysis, delivered via Cloudflare Zaraz) — to understand how users interact with the Service and improve user experience. Google Privacy & Terms

5. Data Protection

• All communications are encrypted via TLS (HTTPS).
• Application data is stored in Cloudflare D1 and accessed only through scoped worker bindings.
• Security headers (CSP, HSTS, etc.) are configured to defend against common attacks.
• Rate limiting is applied to restrict unauthorized access.

6. Information Sharing

The following information may be publicly visible on the Service:

• Display name (on rankings and scoreboards)
• Contest scores and rankings (on scoreboards)
• Correct answer count, wrong answer count, and penalty (on scoreboards)

We will not share personal information beyond the above with third parties without your consent, except where required by law.

7. Cookies

The Service uses cookies for the following purposes:

• Strictly Necessary Cookies: First-party session cookies used by Better Auth to maintain authentication and security on our domain. These are essential for the Service to function and do not require user consent.
• Performance and Analytics Cookies: Used by Google Analytics via Cloudflare Zaraz to analyze usage patterns (page views, sessions, etc.). By using the Service, you consent to the collection of data by Google in the manner and for the purposes set out in their policy. If you are located in the European Economic Area (EEA), a consent management tool will be provided to manage your cookie preferences.

8. Your Rights

You have the following rights regarding your personal information:

• Access and correction of your account information
• Request deletion of your account via our contact form
• Inquiries regarding this policy

9. Policy Changes

This policy may be updated from time to time. Any changes will take effect when posted on this page.

10. International Data Transfers

The Service uses infrastructure or providers including Cloudflare, Stripe, and Google Analytics. These services may process or store your information on servers located outside of your country of residence (including Japan and the United States). By using the Service, you consent to the transfer and processing of your information in these locations. Where required, appropriate safeguards (such as Standard Contractual Clauses) are in place.

11. Contact Us

For inquiries regarding this policy, please contact us via our contact form.