Privacy Policy

1. Introduction

This privacy policy (“Policy”) describes how Chris Pickett (“Cappy.fyi,” “Cappy,” “we,” “us,” or “our”), an individual operating from the State of Texas, United States, collects, uses, and shares personal information of users of the website cappy.fyi and its associated features (together, the “Services”). It applies to personal information we collect through the Services and personal information you provide to us directly. By using the Services, you accept the practices described in this Policy. If you do not agree, please do not use the Services.

2. Personal Information We Collect

We collect personal information in a few different ways, depending on how you use the Services.

Information you provide to us. When you create an account or use the Services, we may collect:

• Account identifiers. Your name, email address, and Google Account identifier, received from Google Sign-In when you choose to sign in.
• Profile and preferences. Information you choose to add, such as the hardware profiles you save to get tailored “will it run” guidance, and your theme or display preferences.
• Communications. Feedback, questions, or other messages you send to us.
• Newsletter address. If you submit your email address to the “Get new tracks” form, we store that address so we can contact you if and when the newsletter begins. It is stored on its own and is not linked to an account. No newsletter is currently being sent.

Information we collect automatically. When you visit the Services, our hosting and backend providers may log basic technical information such as your IP address, browser and device type, referring page, and the pages you view. This is used to operate, secure, and debug the Services.

Cookies. We use a small number of strictly necessary cookies to keep you signed in and to remember essential preferences. These are required for the Services to function and are not used for advertising or cross-site tracking. We do not use advertising or third-party tracking cookies.

Analytics. We use Plausible Analytics, a privacy-friendly, cookieless analytics tool, to understand aggregate usage such as page views and referrers. Plausible does not use cookies or persistent identifiers, does not collect personal information, and cannot be used to identify you or track you across websites.

3. How We Use Your Personal Information

We may use the personal information we collect to:

• Provide, operate, maintain, and secure the Services.
• Establish and verify your identity and authenticate your account.
• Personalize your experience, including tailoring hardware compatibility guidance to the profiles you save.
• Respond to your feedback, questions, and support requests.
• Understand aggregate usage and improve the Services (including by creating aggregated or de-identified data that no longer identifies you).
• Comply with applicable law, enforce our Terms, and protect the rights, safety, and property of you, us, and others, including to detect and prevent fraud or abuse.

Training of AI models. We do not use your personal information to train AI models.

Marketing. We do not currently send marketing email of any kind. You may submit your email address to the “Get new tracks” form to be notified if a newsletter begins. We store that address for that purpose only, and it will not be used for anything else, sold, or shared for advertising. If the newsletter launches, we will only send it where permitted and you will be able to opt out at any time, and you may ask us to delete your address before then. We may still send you service-related messages (for example, security or account notices, or changes to this Policy).

4. How We Share Your Personal Information

We share personal information only in the limited circumstances described below.

Service providers. We use third-party providers to operate the Services. They process personal information on our behalf, for our purposes, and are limited in how they may use it. Current categories include:

• Authentication and identity. Google (Sign-In, account and session security).
• Application backend, database, and hosting. Convex (data storage, serverless compute, and delivery of the Services).
• Analytics. Plausible Analytics (aggregate, cookieless analytics).

Legal and protection. We may disclose personal information if we believe in good faith that it is necessary to comply with applicable law, a lawful request, or legal process, enforce our Terms, or protect the rights, safety, and property of you, us, or others.

Business transfers. If the Services or their assets are transferred to another party (for example, in connection with a sale or reorganization), personal information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Third-party websites. The Services link to third-party websites we do not control. We are not responsible for their content or privacy practices. Your information there is governed by their own policies.

5. Your Rights and Choices

Depending on where you live, you may have rights over your personal information. For residents of the EEA/UK (GDPR), these may include the rights to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. For California residents (CCPA/CPRA), these may include the rights to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for that purpose. We will not discriminate against you for exercising your rights.

Legal bases (EEA/UK). Where the GDPR applies, we process your personal information to provide the Services you request (performance of a contract), for our legitimate interests in operating and improving a secure service, to comply with legal obligations, and, where required, with your consent.

Global Privacy Control. We honor recognized opt-out preference signals, including Global Privacy Control (GPC), as valid opt-out requests where applicable.

Exercising your rights. To make a request, email us at cappycatalog@gmail.com. We may need to verify your identity before acting on your request.

Cookies. Because we use only strictly necessary cookies, blocking them in your browser may prevent you from signing in or using parts of the Services.

6. Security

We use reasonable technical and organizational measures to help protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We keep account information for as long as your account is active and as needed to provide the Services, and we delete or de-identify it when it is no longer needed or upon a valid deletion request, subject to legal obligations.

8. International Users

The Services are operated from the United States and are governed by United States law. If you access the Services from outside the United States, your personal information will be processed in the United States, which may have different data-protection rules than your country.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. We treat any such information as sensitive. If you believe a child under 16 has provided us personal information, please contact us and we will delete it.

10. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. However, we honor Global Privacy Control signals as described above.

11. Updates to This Policy

We may update this Policy from time to time. If we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Changes take effect when the updated Policy is posted.

12. Contact Us

If you have questions about this Policy or your personal information, contact us at cappycatalog@gmail.com.