Privacy Policy
Last updated: July 27, 2026
TheoremPath is a reference and learning site for ML theory and mathematics. This page describes what data is collected, why, and how it is handled.
What we collect
- Anonymous usage analytics. Page views, referrers, device type, and country via Vercel Analytics. No cookies, no cross-site tracking.
- Anonymous product analytics. Bounded events such as landing views, search result-count buckets, account starts, and diagnostic completions via PostHog. The configured client disables autocapture and session recording, redacts search and authentication values from analytics URLs, and uses first-party local browser storage for an opaque analytics identifier.
- Performance metrics. Core Web Vitals via Vercel Speed Insights. Aggregated, not tied to identity.
- Error reports. Client and server errors via Sentry. May include request path and a sanitized stack trace.
- Account data (optional). If you sign in, we store your email and authentication provider ID via Clerk. Used only for authentication and progress tracking.
- Diagnostic and progress data (if signed in). Your diagnostic answers, review schedule, and topic completion are stored so you can resume later.
What we do not collect
- No advertising identifiers.
- No social graph or contact list uploads.
- No selling or sharing of personal data with advertisers.
- Do not include sensitive personal information, confidential information, or proprietary material in diagnostics, notes, or search queries.
Cookies
We use first-party cookies for authentication through Clerk. Theme preference and PostHog product analytics use first-party local browser storage. The PostHog cookie is disabled. We do not use third-party advertising cookies.
Data retention
Usage analytics are retained for 12 months. Error reports are retained for 90 days. Signed-in users can delete their account from the profile page. Self-service account deletion removes the local account row and cascades saved topics, notes, progress, quiz attempts, review cards, and mastery assessments; it also deletes the associated Clerk sign-in account. For a broader verified deletion request covering logs, backups, processor records, or data not reachable from the account UI, contact us via the contact page. Broader verified deletion requests will be completed within 30 days.
Processors we use
- Vercel (hosting and analytics)
- PostHog (bounded product analytics)
- Cloudflare (DNS, edge)
- Clerk (authentication)
- Sentry (error reporting)
- OpenAI (embeddings): public keyword search may be available without sign-in. Semantic search, when active, may require sign-in and may send the submitted query to OpenAI's embedding API (
text-embedding-3-large) to produce a vector. Results may be served from a cached embedding when the same query has been seen recently. - OpenAI and Groq (generation): experimental model-assisted features may use third-party model providers when those features are active. TheoremPath does not intentionally send your Clerk account identity to model providers. User-submitted prompts or queries may still contain personal information if you include it.
Your rights
You can delete your account from the profile page. You can also request access to, correction of, or broader deletion of your data by contacting us via the contact page. Where applicable, users may have rights to access, correct, delete, or restrict certain personal data. TheoremPath will make a good-faith effort to honor access, correction, and deletion requests regardless of jurisdiction.
Changes
Material changes to this policy will be announced on the homepage and dated above. Continued use after notice constitutes acceptance.