This Privacy Policy describes how Island IQ collects, uses, and shares information when you use the Island IQ website at island-iq.com and related web services and accounts (the "Service").
This policy covers the website only. Island IQ mobile apps have a separate privacy policy.
1. Information We Collect
We collect the following types of information:
Account Information
- Email address (for authentication and account management)
- Display name (optional, for personalization)
- Account creation date and last login information
Usage Data
- Saved favorite islands and comparisons
- User preferences and settings
- How you use the Service (pages viewed, features used, and similar interaction events)
My Islands / Creator Analytics
- Islands you add to your private My Islands workspace
- CSV and other files you upload for private analytics
- Related workspace data such as charts, campaigns, and collaborator settings you create in the Service
AI Feature Content
- Prompts, questions, and related content you submit to website AI features (for example summaries, insights, and chat). This content is sent to our AI processor on the server so we can generate a response. It is not used as a browser tracker.
Fortnite Island Data
- Public island codes and metadata from Epic Games / Fortnite APIs
- Public performance metrics and analytics data
- Creator information (publicly available)
Device and Technical Data
- IP address, browser type, device information, and similar technical data collected by analytics and performance tools described below
- Page performance metrics (for example load times) via Vercel Speed Insights
2. How We Use Your Information
We use the collected information for:
- Providing and maintaining our service
- Processing and storing your saved favorites, comparisons, and My Islands data
- Operating AI features you choose to use
- Understanding how the website is used and measuring performance so we can improve it
- Communicating with you about your account
- Ensuring security and preventing fraud (including CAPTCHA on registration when enabled)
- Complying with legal obligations
3. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties, except:
- With your explicit consent
- To comply with legal requirements
- To protect our rights and safety
- To service providers who help us operate the Service, as listed in Section 8 (each subject to their own privacy policy)
4. Data Security
We implement appropriate security measures to protect your personal information:
- Encryption of data in transit and at rest
- Secure authentication and authorization
- Regular security assessments and updates
- Limited access to personal data on a need-to-know basis
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time. Analytics and performance providers may retain their own logs according to their policies.
6. Your Rights (GDPR/CCPA)
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing of your data
- Withdrawal: Withdraw consent at any time
To exercise these rights, contact us through your account settings or our support channels.
7. Cookies and Tracking
We use cookies, similar storage, and third-party analytics on the website. This includes:
Essential cookies and session storage
We use essential cookies and session storage for authentication, keeping you signed in, and operating account features. These are needed for the Service to work.
Google Analytics (GA4 / gtag)
When Google Analytics is configured, we load Google's gtag / Google Tag Manager script. It collects page views, custom interaction events, and exception/error events. IP anonymization is enabled (anonymize_ip: true).
Vercel Speed Insights
We use Vercel Speed Insights to measure website performance (for example page load and Core Web Vitals). This is a performance tool, not Vercel Web Analytics.
Firebase Analytics, Performance, and Remote Config
When Firebase is configured, we may use Firebase Analytics (usage events), Firebase Performance Monitoring (app/page performance), and Firebase Remote Config (feature flags and similar configuration). These load only when the relevant Firebase environment settings are present.
8. Third-Party Services
The website uses the following third-party services. Each has its own privacy policy.
- Google Analytics: Website usage analytics (GA4 / gtag), including page views and custom events, with IP anonymization enabled.
- Vercel: Hosting the website, and Speed Insights for performance measurement.
- Firebase (Google): Analytics, Performance Monitoring, and Remote Config when those features are enabled.
- Supabase: Authentication and database storage for accounts, favorites, and private My Islands data (including CSV uploads).
- OpenAI: Server-side processing of prompts and related content for website AI features (
/api/ai/* and related routes). OpenAI is not used as a browser tracker. - Epic Games / Fortnite APIs: Public island data used to power compare and related features.
- Cloudflare Turnstile: CAPTCHA on account registration to help prevent abuse. Cloudflare is not our website host; the site is hosted on Vercel.
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us through our support channels.