Privacy Policy

Turhan Ergene operates Froga and is the data controller for the personal data described here. For any privacy question or request, contact [email protected].

Only what the product actually needs to work:

• Account — your email address and a securely hashed password, or, if you sign in with Google, the account identifier Google returns. We never see your Google password.
• Profile — username, and optionally a display name, avatar, bio, interests, occupation, how you heard about us, and website/GitHub/LinkedIn links. Everything except the username is optional.
• Learning activity — which rooms you start and finish, your score, and per-question detail: the answer you submitted, whether it was correct, and how long you took. For a written-answer question this includes the text you wrote and the mark and feedback it received. Your votes in poll questions are stored the same way. This is what powers your results, level, streak and badges, and creators' analytics for their own rooms.
• Labs — which lab steps you have completed, and your own working solution to each one (a circuit, a program, a set of commands) so you can reopen it later. If you use a lab without an account, nothing is saved.
• Live games — when you join a live game, the nickname you choose, your answers and your score for that game. You can join without an account; then the nickname is all we have. If you are signed in, a finished game also counts toward your results like any other room.
• Things you create — rooms, questions, learning paths and any images you upload.
• Social actions — who you follow, your bookmarks, and the star ratings you give.
• Safety records — reports you submit, and any moderation action taken on your account (including the reason).
• Feedback — messages you send us through “Give feedback” or “Report a problem”, with the page you sent them from and, for a lab or a live game, which step or question they were about.
• Service records — if you use the AI features, a record of each generation (which feature, which model, how many tokens, what it cost) so we can apply per-account limits. If you change your email address, a timestamped record that you did, so we can rate-limit it. Neither stores the content you submitted or the address you asked for.
• When you leave — if you delete your account, an anonymous note that an account was deleted: the date, how many days old it was, and the reason and comment if you chose to give one. It contains nothing that links it back to you.

We do not collect payment data. There is no checkout on Froga today; premium is granted manually. If that changes, this page will be updated before any payment is taken.

This is the part most worth reading. Froga profiles are public by design — the point is a shareable track record — and public means visible to anyone on the internet, including people who are not logged in, and to search engines.

Publicly visible on your profile at /u/your-username:

• Your username, display name, avatar, bio, occupation, links, and the month you joined.
• Your username and room title, shown as the credited original on any copy another user makes of a room you published.
• Your level and XP, average score, category mastery, a 30-day activity graph, and badges — including the lab steps you have completed, which count toward your level.
• Rooms you created and set to Public, along with their ratings.
• Your follower and following lists.

Two things you control, both in profile settings:

• Recently solved — the list of individual rooms you completed. Turn this off and it disappears for everyone else. Your aggregate stats (level, average, mastery, activity) stay public either way, because they don't identify any individual test.
• Show my name to creators — turn this off and your name and avatar are hidden from a creator's analytics for rooms you played. Your result still counts toward their aggregate numbers.

Some things are visible to other people inside a room rather than on your profile:

• Polls — after you vote, you see how many people picked each choice, and so do other voters, the room's creator and our moderators. Nobody sees who voted for what.
• Live games — everyone in the game sees each player's nickname, avatar and score. The avatar is a generated animal unless you choose to show your profile picture.
• Embedded rooms — anyone can put a public or unlisted room on their own website. Playing a room there records nothing on Froga, and the website around it has its own privacy policy.

Your email address is never public. It is visible only to you and, for support and moderation purposes, to Froga staff.

• To perform our contract with you — running your account, saving your results, showing your progress.
• Legitimate interests — keeping the platform safe and free of spam and abuse, and preventing people from forging their own scores.
• Consent — the optional profile fields, which you can clear at any time, and the optional reason you give when you delete your account.

We do not sell your data, and we do not use it for advertising. We share it only with the providers needed to run the service:

• Supabase — our database, authentication and file storage provider. Your account, profile, activity and uploads are stored there, in their EU (Ireland) region.
• Railway — hosts the application itself. Requests pass through it, which means it processes your IP address and standard server logs.
• Resend, delivering through Amazon SES — sends our transactional email (sign-up confirmation, password reset, email-change confirmation). They process your email address and the contents of those messages. We send no marketing email.
• OpenAI — only when you use one of the AI features, and only the text that feature needs. See the next section.
• Google — only if you choose to sign in with Google, and only to verify that sign-in.
• Cloudflare — routes mail sent to our published contact addresses, so a message you send us passes through it. It also stores our nightly backups (see “How long we keep it”).
• GitHub — runs the nightly backup job. Your data passes through it while the copy is made and is not kept there.

Froga currently runs no third-party analytics, advertising or session-recording tools. Our web fonts are served from our own servers, so loading a page does not send your IP address to a font provider. We may also disclose data where we are legally required to.

Three parts of Froga use an AI model. Each sends only the text that feature needs, together with our own fixed instructions to the model. No username, email address or account identifier travels with it. The provider today is OpenAI, which processes the request in the United States.

• Drafting questions (creators) — the topic, instructions or source material you type. If you load the source from a file, the text is read out of it in your browser; the file itself is never uploaded. Drafts come back to you for review and are saved only if you add them to a room.
• Marking written answers — when you answer a written-answer question, your answer is sent together with the question and the creator's marking criteria. The mark and feedback that come back are saved with your answer, like any other result. You can skip these questions.
• Explaining an attempt — only if you ask for it on your results screen: the questions, your answers and the correct answers. The explanation is shown to you and not saved.

We keep a record that each request happened — feature, model, token counts, cost — to enforce per-account limits. That record does not include what was sent.

Don't paste anything confidential, or anyone else's personal data, into these features. It leaves our systems, and once it has, it is governed by the provider's terms rather than ours.

Your account, profile, learning activity and uploads live in the EU — Supabase's Ireland region — and our transactional email is delivered from Amazon SES in Ireland too.

Some things leave the EU/EEA. Text sent to an AI feature is processed by OpenAI in the United States. Our hosting, mail-routing, backup-storage and backup-job providers are US-headquartered companies and may process data — server logs, and the backup copies described below — outside the EEA. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses in those providers' data processing terms.

We use cookies strictly to keep you signed in — they hold your authentication session and nothing else. A few display preferences — light or dark theme, whether the sidebar is open, whether Explore shows its paths — are kept in your browser's local storage and never leave your device. When you join a live game, the details that let you rejoin it are kept in that browser tab only and are gone when the tab closes. There are no advertising or tracking cookies, so there is no consent banner to click through.

Your account data is kept for as long as your account exists. Delete your account and it goes, as described below. Moderation records are kept after deletion for as long as needed to enforce our rules, but the link to your account is removed, so they no longer identify you.

A room you delete goes to a bin for 7 days, so you can restore it, and is then deleted for good. A live game's nicknames, answers and scores are kept with the game for as long as its host's account and the room exist.

Backups. We back up the database and uploaded images every night, so we can recover from a mistake or an outage. Each backup copy is deleted automatically after 30 days, so anything you delete — including your whole account — is also gone from our backups within 30 days.

You can delete your account yourself, at any time, from profile settings. No email, no waiting period. It takes effect immediately and cannot be undone.

Deleting your account permanently removes:

• Your login and profile, including every optional field and your avatar.
• Every room, question and learning path you created — including rooms other people have played or added to their own learning paths.
• Your entire play history, scores and per-question answers, including written answers and the feedback on them.
• Your lab progress and the solutions you saved.
• Your follows, bookmarks, the ratings you gave and the reports you filed.
• The records of your AI usage.

A few things are kept but no longer linked to you: moderation records naming you as the actor, feedback you sent us, and your nickname and answers in live games you played, which stay part of that game's results. Before deleting you can tell us why you are leaving; that is optional and stored with no link to you. Backup copies of your data are deleted within 30 days.

Because deletion also removes content other people may be using, consider transferring or unpublishing rooms you want to survive before deleting.

If you are in the EU/EEA or UK you have the right to access, correct, export, restrict or object to our processing of your personal data, to withdraw consent, and to have your data erased. Most of these you can exercise directly in the app: edit your profile to correct data, use the visibility toggles to restrict it, and delete your account to erase it. For anything else — in particular a copy of your data in portable form — email [email protected] and we'll respond within one month.

You also have the right to lodge a complaint with your local data protection supervisory authority.

Froga is not intended for children under 16. We don't knowingly collect data from them; if you believe a child has created an account, contact us and we will remove it.

When we change this policy, we update the date at the top of this page and summarise what changed here, so you can see the difference without comparing two versions.

9 October 2026

• Written-answer questions are now marked by an AI model, and you can ask for an AI explanation of a finished attempt. Both send the needed text to OpenAI without your name or account. See "AI-assisted features".
• Added what we keep for labs, live games, polls, feedback and the optional reason you give when deleting your account.
• Backups are now deleted automatically after 30 days, and Cloudflare (backup storage) and GitHub (backup job) are listed as providers.
• Embedded rooms, and what is visible to other people inside a room, are described under "What is public".