Privacy Policy

Who operates Study Space

Matteo Daniel Mezin operates this independent student study service and is responsible for its use of personal data. For privacy questions, access requests or account deletion, email mezin.matteo@gmail.com.

What information is processed

• Account information: your email address, a unique account identifier, sign-in provider, email-confirmation status and authentication/session records. When you use Google, its basic profile information, such as your name and profile picture, may be stored by Supabase Auth as identity metadata. The Study Space profile uses your permanent username and its initial rather than displaying a Google picture.
• Study profile and rewards: your permanent username, study language, completed XP lessons, reward dates, XP and badge dates, the dates of the one-time welcome bonus and daily check-ins (recorded when you open a lesson), and the study streak calculated from those dates.
• Practice activity: the lesson, practice attempt identifier, question set, attempt start time, submitted answers for grading, and stored results and feedback. The reward system stores results, rather than a transcript of open-ended study notes.
• Technical information: the hosting and authentication providers process connection and operational data, which can include IP address, browser/request details and security or error logs.
• Information on your device: theme preference, last-opened lesson, manual review marks, which new lessons you have already seen and the date of the last class reminder are stored in your browser. Individual lesson pages may also remember local theme or practice state.

Contact messages: if you contact the operator, your email address, message and information you provide are processed to answer your request and handle support or privacy matters. Messages sent to the contact address are handled through Gmail, subject to Google’s privacy terms. This is separate from the application’s sign-in permissions.

Google sign-in

When you choose Sign in with Google, Google authenticates you and sends basic email and profile information through Supabase Auth to establish your Study Space account. The current sign-in flow requests email and profile access. It does not request permission to read Gmail messages, Google Drive files, Google Calendar or contacts. Study Space does not receive your Google password.

Google identity information is used for authentication, account identification and support. Study Space does not sell it, use it for advertising or send it to an AI service. You can remove the connection through your Google Account connections; removing that connection does not itself delete the existing Study Space account or progress.

Google is the only way to sign in; Study Space has no password sign-in.

Why the information is used

Account and study data are used to provide the service you request under the Terms of Use: signing in, controlling access to course material, saving preferences, grading practice and calculating progress. The legal basis is performance of the agreement to provide your account and study features. Connection and security information is used to keep accounts and the service safe and resolve failures, on the basis of legitimate interests in operating a secure service.

Every account with a username takes part in the class leaderboard and has a public profile visible to other signed-in students; this is part of the study features provided under the Terms of Use. Providing account information is necessary to use protected study features; you can read the public About, Privacy and Terms pages without an account.

Who receives information

• Supabase provides authentication and the database for accounts, profiles and practice progress. The project database is configured in Frankfurt, Germany.
• Vercel hosts the website and server endpoints and processes requests and technical operational data.
• Google handles the Google sign-in you choose, subject to Google’s Privacy Policy.
• Other signed-in students can see your username, rank, level, XP, badges and completed XP lessons on the leaderboard and your profile. Your email, login identifier, settings and individual answer results are not shown to them.
• The site operator administers the service and can access data when needed for operation, support, security or handling your requests. Information may also be disclosed where required by applicable law.

Class times come from Ca’ Foscari’s public timetable, which the Study Space server downloads without sending any information about you. The application includes no advertising network or analytics tracking script. Hosting and authentication providers still process operational information to supply their services. They may process some information internationally; their privacy and processing terms describe their locations and transfer arrangements: Supabase Privacy Policy, Supabase Data Processing Addendum, Vercel Privacy Notice and Vercel Data Processing Addendum.

Cookies and browser storage

The site uses essential cookies to maintain your sign-in session and protect the Google sign-in exchange. Access cookies follow the authentication token’s expiry, refresh cookies have a maximum browser lifetime of 30 days when issued, and the temporary Google sign-in cookie expires after 10 minutes. Sign out clears the application’s session cookies. Google and service providers may use their own cookies when you visit their services.

Browser preferences and manual review marks use local storage and remain until you clear that browser’s site data or overwrite them. Signing out clears the current account view, but does not erase all local study preferences. Clear site data on a shared device if you want to remove them. Study Space does not use advertising cookies.

Retention and deletion

This version has no automatic account-inactivity or semester-end deletion schedule. Account, profile and reward records remain until the account is deleted or the operator removes them. Practice results are stored per account and lesson and can be replaced by a later attempt. The two-hour practice attempt validity limit affects whether an attempt can be submitted; it is not a promise that its stored row is erased after two hours.

To request account and associated study-data deletion, email the operator from the address linked to your account. Deletion is handled by the operator, not by a self-service button. Deleting the authentication account also deletes the linked profile, attempts, XP and badge records in the application database. Provider logs and backups follow their own configured lifecycles and may not disappear at the same time as live records. A fixed provider log or backup expiry is not promised here.

Your choices and rights

You choose a unique username after signing in. It can be set only once and cannot be changed in the service. You can change your study language in Profile → Settings. You can request access to, correction of, deletion of or a copy of your personal data by emailing the operator. Where applicable, you may also request restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Identity may need to be checked before a request is fulfilled.

You may complain to your local data-protection authority, including Italy’s Garante per la protezione dei dati personali. Practice grading and XP calculations are study feedback; they are not university grading or decisions about admission, employment or other legal entitlements.

Updates and contact

This policy will be updated when the service’s data practices change. The effective date above identifies this version. Contact mezin.matteo@gmail.com about this policy or a privacy request.