Privacy Policy

Last updated: October 18, 2026

This policy explains what the operator of Warmer ("we", "us") collects when you use Warmer, why, who else handles it, and what you can do about it. We keep it short because we collect little.

1. What we collect

• Account information from Google. When you sign in with Google we receive your name, email address and a Google account identifier. We don't receive your Google password.
• Your work. The code you write for each problem, your attempts and their results (run, submit and solved status).
• Navigator readings. While you type, your code and the problem are sent to the Navigator (an AI model) to produce feedback. We record a count and timing of readings for each account, to apply fair-use limits and to measure cost, and keep the few most recent readings so we can include them if you send feedback.
• Billing information. Stripe collects your card details and billing address. We keep only a Stripe customer ID, your plan and your subscription status, never your card number.
• Feedback you send. Your message, plus automatically your current problem, your code for it and recent Navigator readings.
• Invite codes. If you redeem a beta invite code, we record which code and when.
• Usage and errors. A small number of product events (for example, trial started, problem solved) and error reports. These are tied to an internal account ID, not your name or email, and are scrubbed so they don't include your code.
• Technical data. Your IP address and request details appear in server logs and are used for rate limiting and security.

2. How we use it

• To run Warmer: sign you in, save your progress, give Navigator feedback, run tests and check Access.
• To take payment and manage your subscription.
• To keep the service safe and fair: rate limits, abuse prevention, fair use.
• To fix bugs, answer feedback and improve the Navigator and the problems.
• To contact you about your account, billing, or important changes. We don't send marketing email without asking.

We don't sell your personal information, and we don't use your code to advertise to you.

3. Who handles your data

We use these service providers to run Warmer. Each receives only what it needs.

• Google — sign-in.
• Stripe — payments, tax and the billing portal.
• The AI model provider — receives your code and the problem when the Navigator gives a reading, through our AI gateway. We don't send your name or email with it.
• Neon — our database (accounts, attempts, readings).
• Render — hosting.
• Sentry — error reports (scrubbed of code and emails).
• PostHog — product analytics (events tied to an internal ID).
• Discord — feedback you send is delivered to a private channel that only the operator can read.

We may also disclose information if the law requires it, or to protect the safety and rights of our users and the service. If Warmer is sold or merged, your information may transfer to the new owner under this policy.

4. Cookies and local storage

We use one essential cookie to keep you signed in. It is HTTP-only, and lasts up to 30 days. We also keep a random identifier and your theme choice in your browser's local storage. We don't use advertising cookies or third-party trackers. Code you run with Run and Submit executes in your browser.

5. How long we keep it

We keep your account and attempts while your account exists, so you can come back to them, even after your Access ends. Sessions expire after 30 days. When you ask us to delete your account we remove your account, attempts and readings from our database. Billing records may be kept by Stripe, and by us, as long as tax and accounting law requires. Backups and logs may keep copies for a short time after deletion.

6. Your choices

You can ask us to give you a copy of your data, correct it, or delete your account, by emailing trywarmer@gmail.com from the address on your account. Depending on where you live (for example California, Texas, the UK or the EU) you may have additional legal rights, such as to object to or limit certain processing, and we will honor them. You can cancel your subscription at any time in "Manage billing".

7. Security

We use encrypted connections, store sessions server-side, verify payment events cryptographically and limit who can access production data. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects you, we will tell you as the law requires.

8. Children

Warmer is not for children under 16 and we don't knowingly collect their information. If you think a child has an account, contact us and we will delete it.

9. Where data is processed

Warmer is operated from the United States, and our providers process data in the United States and possibly other countries. By using Warmer you understand your information may be transferred there.

10. Changes to this policy

If we change this policy in a material way, we will tell you in the app or by email before it applies. The date at the top shows the latest update.

11. Contact

Privacy questions or requests: trywarmer@gmail.com.