Home

Privacy Policy

Last updated: March 17, 2026

1. Information We Collect

We collect the following types of information:

  • Account information: Email address and display name when you create a creator account via Supabase Auth.
  • Quiz responses: Your answers when you take a quiz, along with your computed score and matched result.
  • Payment information: Payment details are processed securely by Stripe. We do not store credit card numbers on our servers.
  • Usage and analytics data: Page views, quiz completion rates, device type, browser type, IP address, referral source, and aggregated analytics data.
  • Cookies and similar technologies: We use cookies for authentication, session management, analytics, and advertising purposes. See Section 5 for details.

2. How We Use Your Information

  • To provide and maintain the Service, including processing quiz responses and payments.
  • To provide creators with aggregated analytics about quiz performance (view counts, response counts, revenue).
  • To send transactional emails (payment receipts, account notifications).
  • To improve the Service and develop new features.
  • To display relevant advertisements and measure ad performance.
  • To detect fraud, abuse, and security threats.
  • To comply with legal obligations.

3. Data Sharing

We do not sell your personal information. We share data only with the following service providers and partners:

  • Stripe: For payment processing. Subject to Stripe's Privacy Policy.
  • Supabase: For data storage and authentication. Subject to Supabase's Privacy Policy.
  • Google: For analytics (Google Analytics) and advertising (Google Ads). Google may use cookies and similar technologies to collect usage data. Subject to Google's Privacy Policy.
  • Anthropic: Quiz topic descriptions sent to the AI generation feature are processed by Anthropic's Claude API. Subject to Anthropic's Privacy Policy.
  • Quiz creators: Creators see aggregated analytics (view counts, response counts, unlock counts) but do not see individual respondent identities or email addresses.

4. AI-Generated Content

When creators use the AI quiz generation feature, quiz topic descriptions are sent to Anthropic's Claude API to generate quiz content. These prompts are not stored by Arleeto beyond the generation request.

5. Cookies, Tracking, and Advertising

We use the following types of cookies and tracking technologies:

  • Essential cookies: Required for authentication, session management, and core functionality. Cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with the Service (e.g., Google Analytics). These collect anonymized usage data including pages visited, time on site, and referral sources.
  • Advertising cookies: Used by Google Ads and other advertising partners to deliver relevant ads and measure campaign performance. These may track your activity across websites to serve personalized advertisements.
  • Remarketing: We may use Google Ads remarketing to show ads to users who have previously visited our site. Google uses cookies to serve ads based on your past visits.

Opt-out options: You can opt out of personalized advertising by visiting Google Ads Settings, the NAI opt-out page, or the DAA opt-out page. You can also configure your browser to block or delete cookies.

6. Data Retention

Quiz responses and unlock records are retained as long as the quiz exists on the platform. Creator account data is retained until the account is deleted. Advertising and analytics data is retained in accordance with our service providers' retention policies. You may request deletion of your data by contacting us.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request a machine-readable copy of your data.
  • Opt-out of sale: We do not sell personal information. If this changes, we will provide an opt-out mechanism.
  • Non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at privacy@arleeto.com or use our contact form. We will respond within 30 days (or sooner as required by applicable law).

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose; (b) request deletion of your personal information; (c) opt out of the sale of personal information (we do not sell personal information); and (d) not be discriminated against for exercising these rights.

To make a request, contact us at privacy@arleeto.com. We will verify your identity before processing your request.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal data include: (a) your consent (e.g., for advertising cookies); (b) performance of a contract (e.g., providing the Service); (c) legitimate interests (e.g., analytics and fraud prevention); and (d) compliance with legal obligations.

You have the right to withdraw consent at any time, lodge a complaint with your local data protection authority, and exercise any of the rights listed in Section 7 above.

10. Security

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), row-level security policies on our database, secure payment processing through Stripe, and regular security reviews.

11. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately and we will promptly delete it.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email. Your continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related questions, data requests, or concerns, contact us at: