← Back to ChemLab · Terms of Service
Privacy Policy
Last updated: 20 July 2026
ChemLab ("we") is an A-level chemistry study tool at chemlab.study. This policy explains what data we hold about you, why, and the rights you have over it under the EU/UK General Data Protection Regulation (GDPR).
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address + password (stored only as a bcrypt hash — we cannot read it) | Your account and sign-in | Contract (Art. 6(1)(b)) |
| Study progress (topics mastered, quiz scores, practical checklists, game bests) | Syncing your progress across devices | Contract |
| Premium status and a Stripe customer reference | Knowing what you've paid for | Contract |
That is the complete list. We do not collect names, run advertising, use analytics trackers, or profile you. The browser storage we use holds only your sign-in session and your own study progress — no tracking cookies, so no cookie banner is required.
Payments
Card details are entered on and processed entirely by Stripe. Your card number never reaches ChemLab's servers; we store only Stripe's anonymous customer reference and whether your subscription is active.
Where your data lives, and how it's protected
- Stored with Supabase in Frankfurt, Germany (EU) — encrypted at rest with AES-256.
- All traffic is encrypted in transit with TLS.
- Passwords are hashed with bcrypt; database access is restricted by row-level security so each account can only ever read its own row.
Who processes it
| Processor | Role | Location |
|---|---|---|
| Supabase | Database and authentication | EU (Frankfurt) |
| Vercel | Website hosting | Global CDN |
| Stripe | Payment processing | EU/US (EU-approved safeguards) |
How long we keep it
For as long as your account exists. Delete your account and everything above is erased immediately and permanently; any active subscription is cancelled at the same time.
Your rights
- Access & portability — Account → "Download my data" gives you everything we hold, as JSON, instantly.
- Erasure — Account → "Delete my account". Immediate and irreversible.
- Rectification — contact us to correct anything.
- Complaint — you may complain to your national data protection authority.
Age
ChemLab is a study tool for A-level students. If you are below the age of digital consent in your country (13–16 depending on the country), please ask a parent or guardian before creating an account.
Contact
Data controller: ChemLab — cristianmateiionescu@gmail.com
Changes
If this policy changes materially we will note it here with a new date.