§ Privacy

what we keep and why.

Bucket Foundation makes the Bucket desktop app and Learn, a study app for the science canon. A download request and a Learn account each leave the records on this page. We sell no data and run no ads.

download requests

The form at /download stores one record for each email address, in private storage on Vercel Blob. We use it to send the download link and the email you chose.

Email: The address you type. The download link goes there.
Name: The name you type.
Role and research: Stored when you fill them in. Both are optional.
Computer: The operating system and chip you pick.
Email choices: Whether you ticked release notes and the daily digest.
Agreement: The time you ticked the privacy box and the version of the terms you agreed to.
Request times: When you first asked, when you last asked, and how many times.

The terms version stored with a request today is download-consent-2026-09-30.

Resend emails you a download link. The link works for 24 hours, and for 10 minutes after its first use. One address gets one link an hour. A second message, with your email and the time of the request, goes to the founder's inbox.

If you tick the daily digest, Resend emails you each day's What's New entries. Every digest carries an unsubscribe link, and unsubscribing stores a keyed hash of your address and the time. We keep that record so the address stays unsubscribed. The daily deletion job and a deletion request both leave it in place. The release notes choice is stored, and the site sends no release notes yet.

To limit abuse we count valid signups from each IP address and allow one every 30 seconds. Each count is stored under a hash of the IP address and the 30-second window. A daily job deletes counts older than 25 hours, along with the marks that record a sent link and a used link. A request that fills the hidden spam-trap field is stored apart, with the same fields, and gets no email.

A daily job deletes a download record 12 months after your last request. To have it deleted sooner, write to gianyrox@gmail.com and we remove the stored record for your address. The message in the founder's inbox and the send log Resend keeps sit outside that job.

what learn keeps

Email: The address you sign in with, plus what you typed on the waitlist form if you used it.; why To send your sign-in code and your invite, and to answer you when you write to us.
Age band: Your answer to the age question: under 13, 13 to 17, or 18 and over. We never ask for a birth date.; why To decide what you may use. At launch, accounts under 18 can read and cannot save work, and an under-13 answer deletes the account's learning data.
Progress: The decks you open, your placement result, each graded answer, your review schedule and your assessment scores.; why To schedule your next reviews and show your level on your profile.
Public Mastery Profile: Only if you turn it on: the handle and display name you choose, and for each branch you study, how many concepts you started and mastered, your deepest level and your last study date. Anyone can read it at bucket.foundation/m/ followed by your handle.; why To let you show your progress to others. Turn it off and the page goes away.
Product events: A short record, tied to your account, each time one of the events below happens.; why To learn whether Learn works: how many people finish a first session and how many come back.

the events

age_band_setyou answer the age question
placement_doneyou finish placement: the branch, how many questions, how many you knew
study_session_doneyou finish a study session: items studied, items right, seconds spent
assess_doneyou finish an assessment: each item and whether it was right
tutor_turnyou ask the tutor a question, once the tutor is on: the atom, the study arm, and the tokens and cost of the reply

Our servers write these records. The page you study on cannot add to them.

page visits

Vercel Web Analytics counts which pages are opened, from the home page through sign-in to placement. It sets no cookies and keeps no account link.

the tutor study

The tutor is off at launch. When it opens, we will run a study comparing tutor styles. Joining it takes a separate yes on its own screen, and one button takes you out again. Nobody under 18 is enrolled.

who handles it

Supabasestores your account and the records above
Vercelhosts the site, counts page views without cookies, and holds download requests in private Blob storage
Resendsends the download link and the daily digest
Anthropicreceives the text of a tutor question and the lesson it is about, once the tutor is on

export and delete

From your profile, you can download every record we keep about your learning as one file, or delete those records. Deleting removes your progress, profile answers, events and credentials. To close the account and remove your email as well, write to us.

contact

Questions or requests go to gianyrox@gmail.com.