Privacy
Updated Oct 8, 2026
What we store
Your Google name, email and avatar; your time zone; your goals, check-ins, freezes, starting and ending numbers; letters; duel activity; notification settings and push subscriptions; optional GitHub or LeetCode usernames; optional time slots for your habits.
Your card's picture
Your weekly card shows your snowflake, a character you pick, or a pencil sketch. A sketch is drawn on your own device from a photo you choose: the photo is never uploaded or stored. Only the finished sketch is saved (a small greyscale drawing), and you can switch back to your snowflake at any time, which replaces it. If you try Winter Arc without an account, your data is deleted after 14 days without a visit, or when you sign out.
Who sees it
Solo goals are private. Duel partners see only the goals in that duel and your check-ins on them. Letters stay sealed until their unlock date and are only visible to their recipients. Share cards never show private goals. A public profile, if you turn it on, shows your record and Arc scores, never goal names. If you share a card's link, anyone with it can see that card and your season so far (days shown up, scores, tier, how many habits you signed), never which habits.
If you sign in but don't sign a contract, we send one reminder email about a day later. Every email has an unsubscribe link, and we never email more than that without asking.
What we don't do
We don't sell your data or show ads.
Processors
Supabase (database and sign-in), Netlify (hosting), Resend (email), OneSignal (phone notifications, if you turn them on), PostHog (product events: sign-up, lock, check-in, invite, forfeit day) and Google Analytics (page views, with invite links, duel ids and usernames removed from the address before anything is sent; no advertising features).
Your rights
Export everything as JSON or delete your account from Settings. Deleting removes your data; anyone you were dueling carries on solo, and letters you wrote are removed.