Who looks after your information
Ricardo Pereira operates RF Journey. Email support@rfjourney.com for questions about your information or to request access, correction or deletion. The Contact page also explains how to get in touch. Please share only what is needed to identify your account; never send a password or sign-in code.
Information in your account
Account information includes your email address, a permanent account identifier, email-verification status and sign-in identities. Profile settings can include a community name, display name, initials, a chosen RF avatar and background colour, and a picture you upload. Community names are intended as public-facing identities; your email remains an account contact detail.
When you take an account-based assessment, RF Journey also stores the answers, timing, results and any supervised-exam or certificate records required by that assessment. The assessment pages explain their conditions. Certificate information is publicly available only when its sharing settings allow it.
When you choose Google sign-in
When the Google sign-in option is shown, Google’s button code loads from Google, which processes the connection needed to provide that button. When you choose to sign in, it requests your basic identity using the openid, email and profile permissions. Google provides an account identifier, email and verification information, and may provide your name and profile-picture address. Supabase stores this identity information for your RF Journey account. RF Journey uses it to sign you in, recognise your account and provide your account profile.
This integration does not request your Google password or access to Gmail messages, Drive files, calendars or contacts. It does not use your Google information for advertising or sell it. A Google identity with the same verified email can be linked to an existing RF Journey account, preserving its records.
You can review or remove the connection in your Google Account connections (opens in a new tab). Removing that connection does not delete the information already held in your RF Journey account. Log out of RF Journey separately to end its current browser session.
How information is used and stored
RF Journey uses account information to authenticate you, save your profile, associate assessment records with the correct account, provide results and certificates, and protect account access. It is processed by the services that run these features: Supabase for authentication, the account database and picture storage; Vercel for the website and server requests; and Resend for account email delivery. Google processes the sign-in you choose through its own account service. These providers process connection and request information needed to operate their services.
The current Supabase project is hosted in Frankfurt. Other providers may process information in locations covered by their service arrangements. Account pictures are kept in private storage and are served through an authenticated route for your own account. Switching to initials or an RF avatar leaves an existing uploaded picture stored privately so you can reuse it.
Cookies and your browser
RF Journey uses cookies to maintain your signed-in session and complete secure authentication. Authentication cookies are HttpOnly, use SameSite protection and are Secure on the published HTTPS site. Google sign-in also uses a short-lived attempt cookie, which expires after ten minutes. Google manages its own cookies when you visit its sign-in page.
On the hosted website, Vercel’s BotID Basic uses a browser challenge and processes browser and request signals to help distinguish people from automated requests before account operations. These checks protect sign-in, community-name checks and profile changes.
Logging out ends the current RF Journey session. Browser storage and cookies can also be removed through your browser settings; doing so can remove locally saved preferences and sign you out.
Keeping, changing and removing information
Account details, saved profile settings and assessment records remain stored until removed; inactive accounts are not automatically deleted. Profile settings let you edit your display name and appearance and change your community name under its 30-day rule. A previous community name is held for 30 days after a successful change to reduce impersonation and confusion.
Use the Contact page to request a copy, correction or deletion of account information, including an uploaded picture. Requests are handled by the site owner after verifying the account concerned. Revoking Google access or logging out does not itself delete an account or its saved records.
Changes to this notice
This notice describes the current account features. Its update date changes when the notice is revised. Any new use of Google account data requires an updated disclosure and any consent required by Google’s policies.