Privacy Policy

Blocksyc is operated by Jaelyn Song as an individual (referred to in this policy as "we," "us," or "Blocksyc"). We're based in the United States. For privacy questions or requests, reach us at contact@blocksyc.com.

This policy explains what information we collect when you use Blocksyc, how we use it, and the choices you have. By using Blocksyc, you agree to the practices described here.

We collect the following categories of information:

• Account information. When you sign up we collect your email address, a display name, and a password (for email signups) or a Google account identifier and profile picture URL (for Google sign-in). If you opt in, we also store your preference for product update emails.
• Billing information. When you make a purchase we record your subscription plan, remaining credits, and Stripe customer identifier. Payment card details are handled directly by Stripe and are never stored on our servers.
• Conversations. The chats you have with Blocksyc are stored on our servers so you can access them across sessions and devices. They include your prompts, the model's responses, and the sycophancy ratings produced by our evaluator.
• Evaluator telemetry. For each chat turn we record metadata about the evaluator's output (the score, the level, per-axis numeric scores, the chosen model, the system-prompt version). This metadata does not contain your prompt or the model's response text.
• Ratings (opt-in). If you turn on "Help improve Blocksyc" in your Settings, the specific exchanges you actively rate (thumbs up/down or survey responses) are saved alongside the prompt and response so we can analyze how the product is working. You can turn this off at any time.
• Rankings waitlist (anonymous). If you sign up on the rankings page to be notified when our public model rankings dashboard launches, we store only your email address. We use it solely to send that one announcement, and you can ask to be removed at any time by emailing us. No account or other personal info is collected through the waitlist.
• Cookies and analytics. See the "Cookies and analytics" section below.

We use your information to:

• Provide the service: authenticate you, run your chat requests through the chosen model, score responses, and keep your conversation history available.
• Process payments and manage subscriptions through Stripe.
• Send transactional email (account confirmation, password reset, billing notifications). These are sent regardless of marketing opt-in because they're necessary to operate your account.
• Send product update email, only if you have opted in.
• Send a single launch announcement to addresses on the rankings waitlist. That list is not used for anything else.
• Improve Blocksyc's response quality and evaluator accuracy. Aggregate evaluator telemetry is always used for this; conversation content is used only for exchanges you have explicitly opted in to share.
• Detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.

We don't sell your personal information. We do share it with the service providers we depend on, only to the extent needed for them to do their job:

• Supabase hosts our authentication and database. Your account record, conversation history, and feedback rows live there.
• Stripe processes all payments. Your name, email, and payment-card details go directly to Stripe; we never see card data.
• Postmark sends transactional and marketing email on our behalf. They receive your email address and the message content.
• Anthropic, OpenAI, and xAI process the actual AI requests. When you send a message, your prompt and recent conversation history go to whichever provider hosts the model you picked. These providers state that API requests are not used to train their public models. They may retain inputs and outputs briefly for abuse-monitoring; consult each provider's policies for specifics.
• Google handles OAuth sign-in if you choose that option, and (with your consent) Google Analytics for understanding how the site is used.
• Vercel hosts the Blocksyc web application and routes incoming traffic.

We may also disclose information when required by law, to enforce our Terms, or to protect the rights, property, or safety of users or the public.

We use two categories of cookies:

• Strictly necessary cookies. These keep you signed in (Supabase auth tokens), maintain your shopping session during checkout (Stripe), and protect against cross-site request forgery. They are required for Blocksyc to function and are always set.
• Analytics cookies. We use Google Analytics to understand how visitors use the marketing site and product. These set _ga and _ga_*cookies. They're only loaded with your explicit consent. You can grant or withdraw consent at any time using the cookie banner on the marketing site or the "Analytics cookies" toggle in your in-app Settings.

We keep your information for as long as your account is active. When you delete your account from Settings, we permanently remove your profile, conversations, and feedback rows; we cancel any active subscription immediately; and we retain only:

• Anonymized evaluator telemetry, with your user identifier cleared so the rows can no longer be traced back to you. We use these aggregates to track model behavior over time.
• Stripe customer and transaction records that Stripe and applicable law require to be kept for billing, tax, and audit purposes.
• Webhook event logs we use for fraud and abuse prevention, kept for up to seven days.

You can review and update most of your information directly from the Settings panel inside the app. Specifically:

• Edit your display name and email preferences at any time.
• Turn off the "Help improve Blocksyc" toggle to stop new ratings from being recorded.
• Toggle analytics cookies on or off.
• Delete your account permanently, which cancels your subscription and removes your data as described above.

Depending on where you live, you may have additional rights under laws such as the EU/UK GDPR, the California Consumer Privacy Act, or similar regimes. These can include the right to access, correct, port, or delete your personal data; the right to object to or restrict certain processing; and the right not to be discriminated against for exercising these rights. To exercise any of these rights, email us at contact@blocksyc.com. We'll respond within the timeframes required by applicable law.

California residents: we don't sell your personal information, and we don't share it for cross-context behavioral advertising. Analytics cookies are off by default and require your explicit consent.

Blocksyc is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email us and we'll delete it.

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes, we'll notify you by email or through an in-app notice before they take effect.

Questions about this policy or how we handle your data? Email contact@blocksyc.com. You can also review our Terms of Service.