Privacy Policy

Effective Date: March 8, 2026 · Last Updated: March 14, 2026

Quantum Ink Labs, LLC ("Company," "we," "us," or "our") operates Martial Arts: Secret Expert at secret.expert (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform. By using the Platform, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and profile information (username, bio, avatar) through our authentication provider (Clerk). If you register via Google or Apple, we receive the profile information you authorize those providers to share.
• Collection Data: Titles you add to your collection, including format, condition, acquisition details (date, price, source), watch history, favorites, and ratings.
• Wishlist Data: Titles on your wishlist, including priority, preferred format, maximum price, retailer links, and notes.
• Social Data: Follow relationships, friend recommendations (including messages and reactions), activity feed entries, and share links you create.
• Profile Information: Your username, bio, avatar, and any content you make publicly visible on your profile.
• Communications: Messages you send through the Platform's recommendation system, and any communications you send to us (support requests, feedback).

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, button clicks, scroll depth, session duration, and navigation patterns.
• Device and Browser Information: Browser type and version, operating system, device type, screen resolution, and language preferences.
• Network Information: IP address, approximate geographic location (city/region level), referring URL, and ISP.
• Performance Data: Page load times, error logs, and application performance metrics.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and collect analytics data. See Section 7 for details.

1.3 Information from Third Parties

• Authentication Providers: If you sign in via Google or Apple through Clerk, we receive your name, email, and profile picture as authorized by you.
• Discord: If you link your Discord account, we receive your Discord user ID, username, and discriminator. We do not access your Discord messages, server memberships, or other Discord data beyond what is necessary for account linking and role sync.
• TMDb and OMDb: We retrieve publicly available film metadata from these services. This data is about films, not about you.

1.4 Google User Data

If you choose to sign in with Google, we access the following data from your Google account through our authentication provider, Clerk:

• Data Accessed: Your Google account name, email address, and profile picture. We do not access your Google contacts, calendar, Drive files, Gmail, or any other Google service data.
• How We Use It: We use your name and profile picture to create and display your Platform profile. We use your email address for account identification, login, and service-related communications. We do not use your Google data for advertising or marketing purposes.
• How We Store and Protect It: Your Google user data is stored securely in our Convex database with encryption at rest and in transit (TLS/HTTPS). Access is restricted to authenticated sessions tied to your account. Authentication tokens are managed by Clerk and are never stored in our database.
• How We Share It: Your Google user data is shared only with Clerk (our authentication provider) for the purpose of account management. We do not sell, rent, or share your Google user data with any other third parties, except as required by law (see Section 3.3).
• Data Retention and Deletion: Your Google user data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting privacy@secret.expert. Upon account deletion, your Google user data is permanently removed from our systems within 30 days. You may also revoke our access to your Google data at any time through your Google Account permissions.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Operating your account, managing your collection and wishlist, displaying your profile, powering search and browse features, rendering the 3D showcase, and delivering recommendations.
• Social Features: Enabling follows, friend recommendations, activity feeds, notifications, and share links according to your privacy settings.
• Discord Integration: Syncing your rank to Discord roles, posting activity events to Discord channels, and processing bot slash commands.
• Analytics and Improvement: Understanding how users interact with the Platform, identifying popular features and pain points, and making data-driven decisions about product development.
• Communication: Sending you service-related notifications and responding to your support requests.
• Security: Detecting and preventing fraud, abuse, spam, and unauthorized access.
• Legal Compliance: Complying with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Other Users

Based on your privacy settings, other users may see your profile, collection, wishlist, recommendations, activity, and rank. You control your collection visibility (Private, Link-only, or Public) through your settings.

3.2 With Service Providers

We use third-party service providers to operate the Platform, including Convex (backend infrastructure), Clerk (authentication), Stripe (payment processing), PostHog (analytics), Discord (bot integration), and TMDb/OMDb (film metadata). These providers are contractually obligated to use your information only for the purposes of providing their services to us.

3.3 For Legal Reasons

We may disclose your information if required to do so by law or if we believe in good faith that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

• Account data: Retained until you delete your account.
• Collection and wishlist data: Retained until you delete the entries or your account.
• Activity events: Retained for 12 months, then aggregated or deleted.
• Analytics data: Retained in identifiable form for up to 24 months.
• Share links: Retained until you delete them or your account is closed.

5. Your Rights and Choices

You may update your profile information, change your collection visibility, manage notification preferences, and opt out of analytics tracking through your browser's Do Not Track setting. You may request a copy of your personal data or request deletion of your account by contacting us at privacy@secret.expert.

5.1 California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your privacy rights.

5.2 European Residents (GDPR)

You have additional rights including access, rectification, erasure, data portability, and objection to processing. Our legal basis includes consent, contract performance, and legitimate interests. Contact privacy@secret.expert to exercise these rights.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS) and at rest, secure authentication through Clerk with support for multi-factor authentication, and access controls limiting who can access user data.

7. Cookies and Similar Technologies

• Essential Cookies: Required for authentication, session management, and basic Platform functionality.
• Preference Cookies: Store your display preferences such as view mode, sort order, and theme.
• Analytics Cookies: Used by PostHog to collect usage data. Loaded only with your consent where required by law.

8. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@secret.expert.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Platform and updating the "Last Updated" date.

11. Contact Information

Quantum Ink Labs, LLC
Email: privacy@secret.expert
Website: https://secret.expert