Klimbr
Back to Klimbr

Privacy Policy

Effective and last updated:

Klimbr is a learning-path and progress-tracking service at klimbr-app.com. This policy explains the information we process to provide the service, why we use it, and the choices available to you. For privacy questions, contact thingsium@gmail.com.

1. Information we collect

  • Account information: your name or username, email address, account identifiers, sign-in method and account timestamps. If you create a password account, we store a password hash rather than your readable password.
  • Google sign-in information: if you choose Google sign-in, we receive your Google/Firebase account identifier, name, email address, email verification status and profile picture if available. We use an authentication token to verify the sign-in; the submitted Firebase token is not saved in our account database.
  • Learning progress: your selected path and the steps you mark as completed. Your browser may also keep a local copy of progress and undo/redo history.
  • Session and security information: session identifiers, expiration times, IP address, browser information and request records used for authentication, rate limiting, service operation and abuse prevention.
  • Support information: information you choose to send when contacting us. Please do not send passwords, authentication codes or other unnecessary sensitive information.

2. How we use information

We use information to create and authenticate accounts, maintain sessions, save and restore your progress, remember preferences, send requested password-reset emails, answer support requests and keep the service reliable and secure.

We do not sell or rent your personal information. We do not use your account information or learning progress for targeted advertising or to train AI models. Klimbr does not currently embed advertising pixels or third-party marketing analytics.

3. Google account access

Google sign-in is optional. It is used to identify you and create or access your Klimbr account. Klimbr does not request access to your Gmail messages, Google Drive files, contacts or calendars.

Our use of Google user information is limited to the account and authentication purposes described here and follows the Google API Services User Data Policy, including its Limited Use requirements where applicable. Google and Firebase also process sign-in information under their own policies.

You can review or remove Klimbr's access through your Google account connections. Removing Google access does not automatically delete your Klimbr account or previously saved progress; contact us to request deletion.

4. Cookies and local browser storage

Essential cookies support your sign-in session and sidebar preferences. Local browser storage remembers your language, theme, font size and learning-path state. Firebase may also store authentication state in your browser when you use Google sign-in.

You can remove cookies and site storage through your browser settings. Doing so may sign you out and remove local preferences or unsynchronized progress. It does not delete account data already stored on our servers. We do not use advertising cookies.

5. Service providers and sharing

We use providers to deliver the features described in this policy:

We provide information to these services as needed to operate Klimbr. We may also disclose information when required by applicable law or when reasonably necessary to investigate abuse, protect users or secure the service. We do not make account or progress records public.

6. International processing

Our providers operate internationally, so information may be processed outside your country. The location depends on the provider and service. Where applicable, transfers are subject to the safeguards required by data protection law and the relevant provider's arrangements.

7. Retention and deletion

We retain account information and saved progress while they are needed to provide your account, unless you request deletion. Retention of security, support and operational records depends on their purpose, unresolved issues and any applicable legal requirements; we do not currently promise a single fixed retention period for all records.

Sign-in sessions are configured to expire after seven days and may renew when used. Password-reset links expire after thirty minutes. These validity periods do not mean every related database or provider record is automatically deleted at that moment.

To request deletion of your Klimbr account and associated progress, email thingsium@gmail.com from the address associated with the account. We may need to verify your identity. Records required for legal or security reasons may be retained for that purpose; provider backups and logs may remain until their retention processes complete. Browser storage must be cleared on each device separately.

8. Your choices and rights

Depending on the law that applies to you, you may have rights to access, correct, receive a copy of or delete your information, and to object to or restrict certain processing. Where processing depends on consent, you may withdraw that consent. You may also complain to the relevant data protection authority.

Contact thingsium@gmail.com to make a request. We assess requests under applicable law and may ask for information needed to verify the account. Please do not include your password.

Where a legal basis is required, account and progress processing supports the service you request; security and reliability processing supports our legitimate interests in operating and protecting the service; legal disclosures support compliance with applicable obligations.

9. Security

We use HTTPS, hashed passwords and authenticated access to account and progress records. No storage or transmission method can guarantee complete security. Keep your account credentials private and contact us if you suspect unauthorized access.

10. Children

Klimbr is a general learning service and is not designed specifically to collect information from children. If you believe a child has provided personal information contrary to applicable age or parental-consent requirements, contact us so we can review and address it.

11. Updates and contact

We may update this policy as the service changes. The date above identifies the current version. For material changes, we will provide additional notice where required by applicable law.

For questions or privacy requests: thingsium@gmail.com. See also our Terms of Service.