Privacy

calistgress points a camera at you. This is what happens to what it sees, and to everything else.

The camera

The video is analysed in your browser, on your phone, by a pose model that finds the positions of your joints. Each frame is dropped as soon as it has been read. Nothing is recorded, and no video or image is sent anywhere — with one exception you choose: signed in, you can tick "keep a still" on a hold, and that single frame is uploaded to your log.

The pose model and its runtime are downloaded from Google's model storage and from jsDelivr the first time you open the camera screen, like any other file a web page loads. They are not sent your video.

Without an account

Your skill tree position and your log stay in this browser, on this device. They are not sent anywhere. Clearing the browser's data deletes them.

With an account

The same records are kept on our server so they open on your other devices, and the stills you choose to keep are stored there as files. Only your account can read them. Your email address and password are used to sign you in; the password is stored only as a slow, salted hash. If you sign in with Google, we receive your email address and Google's id for your account, nothing else. Each sign-in is logged with its IP address for 90 days.

Measurement

We count visits and signed-in users with lytics, an analytics service run by the same people as calistgress. It records which account signed in by its internal id, never by email address.

Email

We email you only about your account (for example, if someone tries to register with your address) and, if you joined the waitlist, once when your place is ready.

Deleting

Deleting a session in the log deletes it everywhere it was synced. To close your account and erase everything in it, write to us with the address you signed up with.