Privacy Policy

This policy explains how CoreXScoring processes personal data when you use the catalog, comparison tools, vault and CoreX AI. CoreXScoring is currently a free personal project in an early stage.

Data we process

When you create an account with Google, we receive only the basic profile information authorized by Google: your name, email address and account identifier. We do not request access to Gmail, Drive, contacts or other content in your Google account.

We also process data that you voluntarily save in the application, such as configurations, favorite components, builds, combos and conversations. To protect the service from abuse, we may record technical request data, such as a user identifier, a hash of the IP address, date, AI provider and usage metrics.

Purposes and legal basis

We use this data to create and maintain your account, provide requested features, save your preferences and settings, respond to support requests, maintain service security and prevent abuse. Processing needed for the account and its features is based on providing the requested service; communications with external AI providers require your prior confirmation.

Third-party services

Authentication, sessions and data storage are managed through Supabase. When you sign in with Google, Google processes authentication under its own policies. These providers are necessary services for CoreXScoring to operate.

We use Vercel Web Analytics to obtain aggregated audience and performance metrics, such as visited pages, general origin, approximate country and Web Vitals. This tool is not used for personalized advertising or individual profiling.

CoreX AI

If you choose to use CoreX AI with an available external provider, such as Groq, Cerebras or OpenRouter, your message, the technical context strictly needed to respond and the results of queries made within CoreXScoring are sent to that provider. The interface asks for confirmation before the first message is sent to each provider and displays the effective provider in the chat.

API keys you configure for your own provider are stored encrypted. They are not included in messages sent to the model. Each external provider's terms and privacy policies also apply; providers may process data outside the European Economic Area.

Retention and deletion

Saved conversations are kept for a maximum of 90 days from their last message and you can delete them from the history. Temporary chats are not saved as conversations. You can remove your own API keys and delete your account from settings; this deletes associated data according to the service's technical configuration.

Cookies and local storage

We use essential cookies to maintain sessions and protect authenticated requests. Some preferences, such as comparison state, may be stored in the browser's local storage. Vercel Web Analytics collects aggregated metrics without advertising cookies. We do not sell personal data. See the Cookie Policy for more information.

Your rights

If you live in the European Economic Area, you may request access, rectification, erasure, restriction or objection to processing, as well as portability where applicable. You may also withdraw consent for external AI providers by stopping their use. To exercise these rights, write to the email below. You may lodge a complaint with the Spanish Data Protection Agency if you believe processing does not comply with applicable law.

Changes to this policy

We may update this policy if the service features, providers or legal obligations change. The last update date shown at the end of the page indicates when the new version took effect.

Controller and contact

The data controller is Rynaldo Bux, resident in Spain. For privacy questions or to exercise your rights, write to corexscoring@gmail.com.

Last updated: September 15, 2026.