Privacy Policy

Last updated: 2026-10-13 · Effective: on publication

Tigris Zone ("we", "us") is a study tracker for adults. This policy explains what we collect, why, who else touches it, how long we keep it, and how you get it back or make it go away.

The short version: we collect what the product needs to work. There are no ads, no analytics SDKs, no tracking cookies, and we do not sell or rent your data to anyone.

1. Who is responsible for your data

Tigris Zone is operated by Juan David Cruz Angel, an individual based in Bogotá 111156, Colombia, who acts as the data controller ("responsable del tratamiento" under Colombian Law 1581 of 2012).

Contact for anything in this policy: [email protected].

2. What we collect

Your account

• Email address and a password. The password is stored only as a salted hash by our authentication provider; we never see it.
• If you sign in with Google or Discord: the account identifier, email, and the name and picture those services share with us.
• Your confirmation that you are 18 or older and your acceptance of the Terms and this policy: which version you accepted, and when.
• Account state: when you signed up, when you last signed in, and whether you asked us to delete the account.

What you put into Tigris Zone

• Study data: sessions (start, end, duration, mode, target, tag, the note you attach), tags.
• Planning: tasks, lists, task tags, task attachments (files you upload), deadlines, habits and their check-ins, schedule blocks and calendars.
• Notes and note folders.
• Customization: your desk (The Zone) layout, desk backgrounds you upload, playlists (the links you add), and your Arena front.
• Profile: display name, handle, avatar, banner, bio, interests, an optional GitHub link, and your visibility settings.

What you exchange with other people

• Friendships: who you sent requests to or accepted, when, and the optional note on a request (up to 280 characters).
• Direct messages between friends, including replies and read receipts.
• Blocks you create.
• Teams: Teams you create or join, your membership and status, Team goals and tasks, and messages you send in a Team.

What you send us

• Feedback and reports sent from the app, including the page you were on and your browser's user-agent string, so we can reproduce a problem. A report about another person records who it is about.
• Emails you send to [email protected], with whatever they contain.

Payments

Payments are processed by Polar, our merchant of record (see §5). We never receive or store your card number. From Polar we receive and keep: the plan you bought, the amount, currency and tax, the order and subscription status, the billing email you used at checkout, and Polar's identifiers for the order, subscription, and customer.

Technical data

• Our hosting and backend providers process your IP address, request metadata, and error logs to deliver the service and protect it from abuse. We do not use these logs to build a profile of you.
• Cloudflare Turnstile checks that sign-up and sign-in requests come from a person, not a bot.
• Your browser keeps your session token and your preferences (theme, style pack, layout) in local storage. These are needed for the product to work; they are not used for tracking.

Guest mode

If you use Tigris Zone without an account, the study content you create is stored in your browser's local storage, not on our servers. It reaches your account only if you create one and choose to import it. Technical requests and the third-party services in §5 still process data as described in this policy, for example when a page loads fonts or you play a video.

The Tigris Zone browser extension

The optional Tigris Zone extension for Chrome opens the Tigris Zone web app in a separate, resizable window. Data you enter there is the same data as in the web app, and this policy covers it.

• Text you capture. It reads a page only when you ask it to: when you choose Add to Tigris Zone on selected text or a link, or press its capture shortcut (Alt+Shift+A), it places that text (up to 500 characters) in the task composer of your Tigris Zone window. It is saved to your account only if you submit the task. The extension does not record the address of the page you captured from and does not read your browsing history.
• Its own settings. It stores, in your browser's extension storage only: which Tigris Zone address it opens, the last view you used, and the window's size and position.
• The toolbar badge. While a focus block runs, the Tigris Zone window tells the extension what to show on its icon (the minutes, or that you paused). That stays in your browser.

The extension has no analytics and sends nothing to us or to anyone else on its own. Removing it from your browser removes its settings.

3. What other people can see

Your notes, tasks, task attachments, desk backgrounds, study sessions and direct messages are never public. The one upload that is public is your avatar, if you upload one (see §9). Other people see you only through the features below, and only as described.

• The Arena shows you as an anonymous tiger by default: your rank and study hours, with no name, handle or avatar. If you choose Visible, your name, handle and avatar appear next to your hours on a board anyone can view, signed in or not. You can also choose Hidden and leave the board. Change it in Profile → Edit.
• The Arena map shows the territory you hold, including the starting point you chose, to anyone, signed in or not. It follows the same setting: under your name if Visible, as an anonymous tiger by default, and not at all if Hidden. The starting point is a game choice, not your location, so do not pick the place where you live if you would rather nobody guessed it.
• While a study session is running, signed-in users can see that someone is studying and when the session started. Your name and avatar are shown with it only if your Arena visibility is Visible. If it is Hidden, nothing is shown.
• Anonymous hides your name, not your account. In the Arena and while you study, an anonymous tiger still carries an internal account identifier. That is how your friends see you studying, and it means a friend, or anyone who already knows that identifier, can tell it is you. Choose Hidden if you do not want to appear at all.
• Your public profile (tigriszone.com/u/your-handle) is off by default. If you turn it on, anyone with the link sees the sections you choose to share. Each richer section (activity heatmap, playlists, GitHub calendar) has its own switch, also off by default.
• Friends can see your friend profile, when you are studying, and the playlists and stats you choose to share with them.
• Teams: other members see your name (unless you study anonymously in Teams), that you are studying, your progress toward the Team goal, and the messages you send there.
• Direct messages are visible to you and the friend you are talking to.

Messages are not end-to-end encrypted. Direct messages, friend-request notes and Team messages are encrypted in transit and at rest by our providers, but they are stored in a form that the operator can read with database access. We only access them to investigate a report, to comply with the law, or to keep the service running. Do not use Tigris Zone to share passwords or other secrets.

4. Why we use your data

When you create an account, you confirm that you are 18 or older and authorize us to process your data for the purposes below. We keep a record of that authorization.

We do not use your data for advertising, sell it, or use it to train AI models. We send no marketing email. We contact you only about your account, the service, and your purchases. Polar sends the emails about your purchase (receipts, renewals) under its own policies.

5. Who else processes your data

Providers that process data for us

Each processes only what it needs to do its job for Tigris Zone.

Services with their own policies

These services receive data directly from your browser when you use the feature, under their own terms and privacy policies.

The Discord community server is separate from Tigris Zone. What you post there is governed by Discord's policies, and your Discord identity is not linked to your Tigris Zone account unless you signed in with Discord.

6. International transfers

Our providers are mostly in the United States, so your data is processed outside Colombia and outside your own country. We share with each provider only what it needs for its job, under its terms of service and data processing terms. We do not transfer data to anyone for their own marketing.

7. How long we keep it

• While your account is active, we keep your data so the product works.
• Content you delete (a session, task, note, file, message) is removed from the live database when you delete it.
• Direct messages are deleted when the friendship ends, when either person blocks the other, or when either account is deleted.
• Team messages stay with the Team, visible to its members, after it ends. They are deleted when your account is deleted.
• Account deletion: when you delete your account in Settings, it is locked immediately. 30 days later, its data, including uploaded files, is permanently erased, except for the records listed below. During those 30 days you can sign in and choose Restore my account. Signing in alone does not restore it.
• Subscriptions stop renewing when you ask for deletion, and you are not charged again. Premium stays until the end of the period you already paid for.
• Kept after deletion, detached from your account: billing records (orders and subscriptions), for as long as tax and accounting law requires; and feedback and reports you sent, until they are handled and no longer needed to keep the service safe.
• Support emails are kept while we need them to answer you and keep a record of your request.
• Your acceptance record is kept while your account exists.
• Backups: during the beta, Tigris Zone keeps no separate backups of your data. Once something is deleted, neither we nor you can bring it back.
• Technical logs at our providers are kept for the short periods those providers set. We do not keep our own copies.

8. Your rights

You can, at any time:

• Access your data and get a copy. Email us and we send it in a portable format (JSON or CSV).
• Correct it. Most of it you can edit in the app directly.
• Delete it. Delete individual items in the app, or your whole account in Settings.
• Ask for proof of the authorization you gave us, and how we have used your data.
• Withdraw your authorization and ask us to delete your data, unless a legal duty requires us to keep it. Turning a sharing feature off withdraws it for that feature.
• Object to processing we do to keep Tigris Zone safe.
• Complain to a data protection authority: in Colombia, the Superintendencia de Industria y Comercio (SIC). Under Colombian law, you first file a claim with us.

To exercise any right, email [email protected] from the address on your account. Someone can also act for you if they show they are authorized to. We confirm that we received your request, then answer it in full: queries within 10 business days, extendable once by 5 business days, and claims within 15 business days, extendable once by 8 business days, as Colombian Law 1581 provides. If we need more time, we tell you why before the deadline. We may ask you to confirm the request from your account's email so nobody else can make it for you.

9. Security

Connections use HTTPS. Access to your data is controlled by database-level rules designed so that one account cannot read another's private data. No system is perfectly secure, and we fix what we find.

Desk backgrounds and task attachments are kept in private storage. Uploaded avatars are public: anyone with the image link can open it, so profiles can show it. Banners are preset images or Unsplash links, not uploads.

If a security incident affects your data, we tell you, and we report it to the Superintendencia de Industria y Comercio and any other authority the law requires.

10. Age

Tigris Zone is only for people 18 or older, and every account confirms it. If we learn that an account belongs to someone under 18, we close it and delete its data.

11. Changes

If we change this policy in a way that matters, we tell you by email or in the app before the change takes effect, and we ask you to accept the new version before you keep using your account. The date at the top always shows the current version.

12. Contact

[email protected]. We read every message.