Overview
HomeWodRX ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
We collect information you provide directly to us, including:
- Account information — your email address and display name when you create an account
- Workout data — results, scores, and notes you log on the site
- Messages — feedback or support requests you send via the Contact page, processed through our form provider, Web3Forms
If you've accepted analytics cookies via our cookie banner, we also collect certain information automatically when you use the site, including your IP address, browser type, pages visited, and the date and time of your visit. This is standard web analytics data collected via Google Analytics and Vercel Analytics — see Cookies below.
We also use Sentry for error monitoring, which may automatically capture technical diagnostic data (such as your IP address, browser type, and the page you were on) when something breaks, so we can fix it. This runs regardless of your cookie choice, since it's necessary to keep the site working reliably — see Legal Basis for Processing below. On the sign-up page, Cloudflare Turnstile collects limited device and browser signals to confirm you're not a bot before creating an account.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the site and its features
- Populate your training log and display your results on the leaderboard (if you opt in)
- Respond to your feedback and support requests
- Understand how the site is used so we can make it better (only if you've accepted analytics cookies)
- Detect and prevent bot signups and abuse
- Diagnose and fix technical errors
Legal Basis for Processing
If you're located in the EEA, UK, or another jurisdiction with similar requirements, we process your personal data on the following legal bases under the GDPR:
- Contract — processing your account information, workout data, and login session is necessary to provide the service you signed up for.
- Consent — Google Analytics and Vercel Analytics cookies only run after you accept them via our cookie banner. You can withdraw this consent at any time (see Cookies).
- Legitimate interests — error monitoring (Sentry) and bot protection (Cloudflare Turnstile) run on this basis, to keep the site secure and functioning correctly. We've weighed this against your privacy interests and limited the data collected to what's needed for those purposes.
- Legal obligation — where we're required to disclose information to comply with the law.
Information Sharing
We do not sell, trade, or rent your personal information. We share information only with the service providers who help us run the site, each acting as a data processor under their own privacy policy and terms:
- Supabase — database, authentication, and login sessions
- Resend — transactional email (account confirmations, password resets, digests)
- Vercel — website hosting, plus Vercel Analytics if you've accepted analytics cookies
- Google Analytics — usage analytics, only if you've accepted analytics cookies
- Sentry — error monitoring and diagnostics
- Web3Forms — processes Contact page submissions and relays them to us by email
- Cloudflare — Turnstile bot protection on sign-up
We may also disclose information if required by law or to protect the rights and safety of our users.
Your publicly visible leaderboard entries (username and score) are visible to all site visitors. You control whether your results appear on the leaderboard.
International Transfers
HomeWodRX and the service providers listed above are based in or operate infrastructure in the United States. If you're accessing the site from the EEA, UK, or elsewhere outside the US, your information will be transferred to and processed in the US. Our service providers maintain appropriate safeguards for these transfers, such as Standard Contractual Clauses, as required under their respective privacy and data processing terms.
Data Retention
We keep your account information and workout data for as long as your account is active. If you delete your account from Profile settings, we delete your personal data from our systems, other than records we're required to keep for legal, security, or fraud-prevention purposes (kept only as long as necessary for those purposes).
Contact form messages are retained as long as needed to respond to and resolve your inquiry. Analytics data collected via Google Analytics and Vercel Analytics is retained according to those providers' standard retention settings.
Cookies
We use essential cookies to keep you logged in, and — only with your consent — analytics cookies to understand how the site is used. On your first visit, a banner lets you accept or reject analytics cookies; nothing beyond essential cookies runs until you accept. See our Cookie Policy for full details and how to change your choice at any time.
Your Rights
If you're located in the EEA, UK, or another jurisdiction with similar data protection laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erase your personal data ("right to be forgotten")
- Restrict how we process your data
- Object to processing based on legitimate interests
- Port your data to another service in a structured, machine-readable format
- Withdraw consent at any time for anything we process based on consent (e.g. analytics cookies), without affecting the lawfulness of processing before withdrawal
- Lodge a complaint with your local data protection supervisory authority if you believe we haven't handled your data properly
To exercise any of these rights, contact us via the Contact page and we will respond within 30 days. You can also delete your account at any time from your Profile settings, or manage your cookie consent from the Cookie Policy page.