Privacy Policy

Data we collect

• Account data: your email address and password (password is hashed by our authentication provider, Supabase — we never see it in plain text), used to create and secure your account.
• Session content:cloud backup is a paid feature. If you use it, the text of your notes, timestamps, students, teams, and homework items is uploaded to our database so it's available across your devices. Screenshots and image attachments are never uploaded by cloud backup — they stay on your own computer. You can also turn on end-to-end encryption, in which case your notes are encrypted on your device with a key only you hold, and we cannot read them at all.
• Live session data:if you start a live coaching session, the notes and images you send are relayed in real time to the student(s) you invite. This is the one case where an image passes through our infrastructure. It is relayed, not archived, and isn't kept beyond the session.
• Homework replies: if a student submits homework progress back to you, that submission is stored so it can reach your account.
• Discord delivery: if you connect a Discord server, your notes and screenshots are sent from your computer straight to Discord. They never pass through our servers, and we don't store them. Our Discord bot is used only to create the student's private channel and set who can see it - it cannot read messages. We keep a minimal record that a setup request happened (your account and the time) so we can respond to abuse of our Discord app; never any note, image, or channel name.
• Synced devices:so we can hold cloud backup to 5 devices per account, each device that syncs is recorded as a random ID your app generates on first run, the computer's name (so you can tell your own devices apart), and when it last synced. That is the whole record - no IP address, no hardware identifiers, no fingerprinting. You can see and remove your devices on your account page at any time.
• Payment data:if you purchase a subscription, payment is handled entirely by Paddle, our merchant of record. We do not receive or store your card details — Paddle shares with us only what's needed to manage your subscription (e.g. plan, status, renewal date).

Data we don't collect

Your screenshots and image attachments are not uploaded to us, except when you relay them yourself during a live session. There is no image library on our servers and no scanning of your images, because we never hold them.

The app can optionally read live game data (e.g. League of Legends' Live Client Data API) directly from your machine to auto-fill timestamps. This stays local between the app and the game client — it is never sent to our servers. We don't run analytics or tracking scripts on account.vodpad.gg.

How we use your data

To provide the account, cloud sync, and live session features you use; to send account-related email (password resets, service notices); and to manage your subscription. We don't sell your data or use it for advertising.

Where data is stored

Account and session data is stored with Supabase. Transactional email is sent via Resend. Discord messages you send go to Discord and are governed by Discord's own privacy policy. Payments are processed by Paddle. Sign-up and sign-in are protected by Cloudflare Turnstile, which checks that a request comes from a real person. Each provider processes data under its own privacy terms as our data processor.

Your rights

You can access, export, or delete your session data from within the app at any time. To delete your account and associated data entirely, contact us at the address below.

Children

VODPad is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the date above.

Contact

Questions about this policy or your data: privacy@vodpad.gg