Privacy Policy | MathGPT.now

The short version

Effective and last updated: 4 October 2026. This policy covers the MathGPT.now website and the MathGPT plugin for ChatGPT and Codex. Questions or privacy requests can be sent to [email protected].
When you sign in, Google tells us four identity details: an account ID, your email address, your name, and a link to your profile picture. MathGPT.now also keeps the account settings, usage, rewards, and subscription status needed to provide the features you use.
Your Google password never reaches this site.
A problem you type and a photo you upload are sent to an outside AI provider to be answered.
Because you have to be signed in to use the tutor, the problem you typed and the answer you got back are saved to your account so you can reopen them at your solver history. You can delete any of them there, one at a time. The photo file itself is never saved.
Practice progress, saved graphs, and notebook pages live in your own browser and are never sent to us.
There are no ads or cross-site advertising profiles. The public website uses a first-party Matomo analytics service at tracking.mathgpt.now to measure page visits and link activity; the MCP endpoint does not add analytics data to tool results.

What signing in actually does

Signing in uses Google, and only Google. You are sent to Google, you approve the request there, and Google sends back a signed token that proves who you are. We check that token, then save a small row in one database table. The calculators, guides, and formula library do not ask you to sign in at all. Only the AI tutor does, because every tutor answer costs money to produce and an account is how we keep that under control.

The four things Google tells us

We ask Google for the smallest set of permissions that lets an account exist: openid, email, and profile. From that we keep exactly these fields, plus the date the row was created and last updated.

A Google account ID, which is a long number that identifies you to Google and to nobody else.
Your email address, which is how we recognise your account and how you can ask us to delete it.
Your display name, so a page can greet you.
A web link to your Google profile picture. We store the link, not the image.

What we never receive

These are not choices we made carefully; they are things the sign-in method makes impossible.

Your Google password. It is typed on Google's site, never on ours.
Your contacts, calendar, files, or anything else in your Google account.
Your date of birth, phone number, or home address.
Your full payment-card details. If you buy a website subscription, those details are entered with the payment processor rather than sent to MathGPT.now.

What happens to a problem or a photo

This is the part people most want a straight answer about, so here it is. When you send a problem to the tutor, the text (and the photo, if there is one) travels from your browser to our server, and our server passes it straight on over an encrypted connection to the outside AI provider that writes the answer. The answer comes back and goes to your screen. The tutor requires an account, so at that point we also write the problem text and the answer text into our database, attached to your account, and they appear at your solver history. The uploaded image file itself is still never written to the database or to disk; when you send a photo without typing anything, the saved question is a fixed placeholder line, not the picture. What the AI provider keeps on its side is governed by its own terms, not by this page, so treat anything you send as leaving our control.

What your solver history holds, and how you erase it

Only signed-in people can use the tutor, so there is no anonymous version of this to worry about: if there is no account, nothing is written. Each answered question creates one conversation row with a short title, plus two message rows.

The problem text exactly as you typed it, saved as the "user" message.
The tutor's full answer, saved as the "assistant" message.
A title made from the first 60 characters of your question, so the list is readable.
The times it was created and last updated. Nothing else, and no copy of the image.
Open /history, press Delete on a conversation, and both messages go with it immediately and permanently.

The checks a photo goes through

Before an image is sent anywhere, the server checks it. These limits exist for safety and cost, and they are the reason you sometimes get an error instead of an answer.

It must be a PNG, JPG, WEBP, or GIF. Other file types are rejected.
It must be under 8 MB and under 25 megapixels.
It must be a real, readable image. A file that only pretends to be an image is rejected.
An empty file is rejected before anything is sent.

What you should not upload

The safest rule is to send the math and nothing else. Crop the photo before you send it.

Names, class lists, student numbers, or a grade report in the corner of the picture.
A live or proctored test. The academic integrity page explains why this matters beyond privacy.
Anything confidential that happens to share the page with the math.
Somebody else's work or personal information.

The main data categories, in one table

This table summarizes the main categories used by the website. The plugin-specific categories and retention rules are listed separately below.

What MathGPT.now collects, why, how long, and how to remove it
What we collect	Why	How long we keep it	Can you delete it?
Google account ID, email, name, and profile picture link	To create your account and sign you back in later.	In one `users` table, from your first sign-in until it is deleted. The code sets no automatic expiry.	Yes. Email [email protected] from the address on the account and the row is deleted. There is no self-service delete button yet.
Your Google password	Not needed. Google checks it and sends us a signed token instead.	Never received, so never stored.	Nothing to delete.
The math problem you type, and the answer the tutor gives back	It is the question the tutor answers, and saving the pair is what lets you reopen it later at your solver history.	Sent over an encrypted connection to the AI provider, and written to our `messages` table against your account, with a short title in `conversations`. The tutor needs an account, so this only ever happens for a signed-in person. The code sets no automatic expiry.	Yes, by you, immediately. Open /history and press Delete on that conversation. Deleting the whole account removes every conversation with it. The provider still holds its own copy under its own terms.
A photo of a problem you upload	So the tutor can read a handwritten or printed problem.	Checked, converted for the request, and sent with it. The image file is never saved to disk or to the database. If you send a photo with no typed question, the saved history entry is a fixed placeholder line instead of the picture.	There is no stored copy of the image to delete. Delete the conversation to remove the answer that was written from it.
Your sign-in cookie, named `mathgpt_session`	Keeps you signed in and carries the token that proves a form came from this site.	Up to 30 days, then it expires. It is marked HttpOnly and SameSite, so other sites cannot read it.	Yes. Sign out, or clear cookies for this site.
Matomo analytics data and first-party `_pk_*` cookies	To measure page visits and link activity, diagnose site problems, and understand aggregate use without advertising profiles.	Visit records are retained for no more than 30 days. Browser cookies remain until their configured expiry or until you clear them.	Yes. Block or clear analytics cookies in your browser, or email [email protected] about an identifiable analytics record.
Stripe customer and subscription identifiers, plan, status, and paid-through date	To provide and manage a MathGPT Unlimited website subscription. MathGPT.now does not receive the full payment-card number.	Stored with the account until the account is deleted; Stripe keeps its own transaction records under its policy and legal obligations.	Cancel through the billing page and email [email protected] from the account address to request account deletion.
Work saved in your browser: practice progress, saved graphs, notebook pages, study plan, light or dark theme	So you can pick up where you left off.	In your browser's local storage until you clear it. It is never sent to our server.	Yes, entirely by you. Clear site data in your browser, and it is gone.
Server error records	So we notice when the tutor is broken.	Application access and error logs are retained for no more than 30 days. They record request metadata and failures, not the body of your problem or your photo.	Email [email protected] about deletion of an identifiable access record.

Work that stays in your browser

A large part of this site never talks to our server at all. The graphing calculator, the scientific calculator, the matrix tool, the geometry board, the notebook, and the practice tracker all run inside your browser and save their work in your browser's local storage. Clearing your browser data deletes that work permanently, and we cannot get it back for you, because we never had a copy. The flip side is the good part: nobody at MathGPT.now can see what you graphed or which practice questions you missed.

On a shared or school computer

Local storage belongs to the browser profile, not to you. Anyone using that profile afterwards can open the same saved work.

Sign out when you finish, which clears the session cookie.
Clear site data for mathgpt.now if the work was personal.
Use a private window when you do not want anything kept at all.
Remember that a school-managed device may keep its own records that we know nothing about.

Cookies, trackers, and security

The website uses the mathgpt_session cookie to keep an account signed in and may use first-party _pk_* cookies for Matomo analytics. Matomo is served from tracking.mathgpt.now and processes the page URL, referring page, approximate browser and device information, link activity, visit time, and the IP address used to reach the service. We use that information to understand aggregate site use, diagnose failures, and protect the service; not for advertising or cross-site profiling. Analytics and application access records are retained for no more than 30 days. You can block or clear analytics cookies in your browser. Traffic runs over HTTPS, and the Google sign-in flow uses a one-time value that stops a stolen sign-in link from being replayed.

How to delete your data

There are three separate piles, and they are deleted in three different ways.

Browser work: clear site data in your browser. Instant, and completely in your hands.
Solver history: open /history and press Delete on a conversation. The question and the answer are removed from the database straight away, with no email and no waiting.
Account row: email [email protected] from the address on the account and ask for deletion. A person removes the row, and every saved conversation is deleted with it.
You can also remove MathGPT.now from your Google account permissions at any time, which stops future sign-ins.
Deleting the account does not reach back into the AI provider's own records, which is why we tell you not to send anything sensitive in the first place.

ChatGPT, Codex, and the MathGPT plugin

This section applies when you enable the MathGPT plugin in ChatGPT, Codex, or another compatible MCP client. The current MCP connection uses no MathGPT account login or OAuth authorization. The client sends MathGPT.now only the arguments for the tool call it chose to make. MathGPT.now does not receive your full conversation unless the client includes text from it in a tool argument, and the plugin cannot open unrelated chats, files, school systems, Google services, website account history, or billing information.

Data categories and why they are used

The plugin processes only the data needed to perform the requested mathematics task, enforce short-term limits, and protect the service.

Task inputs: the typed math problem, requested solution mode, study topic, level, difficulty, question count, answer preference, available study days, or weak areas that you deliberately provide are used to produce the requested solution, practice set, flashcards, or study guide. The current MCP tools do not accept problem photographs or other file uploads.
Task outputs: generated explanations and study materials are returned to the MCP client so it can answer you. The plugin does not add them to your MathGPT website account or solver history.
Connection and security data: the source IP address, request time, requested MCP method, HTTP status, browser or client identifier, and limited error information are used for rate limiting, abuse prevention, availability monitoring, and troubleshooting. The application access log does not intentionally record tool arguments or generated answers.
The plugin does not request a MathGPT account, email address, name, password, access token, payment-card details, government identifier, health record, or one-time code. Do not put sensitive personal information into a math problem or study topic.

Who receives plugin data

OpenAI operates ChatGPT or Codex and sends the tool request. MathGPT.now and its hosting, reverse-proxy, and content-delivery providers process connection data to deliver and protect the endpoint. To generate the requested mathematics response, MathGPT.now sends the task input to OpenRouter and the selected model provider over an encrypted connection. Those providers handle the request under their own terms and privacy policies. We do not sell plugin data, use it for advertising, give it to data brokers, or use it for cross-service behavioral profiling.

How long plugin data is kept

MathGPT.now does not create a website account or persistent task history for an MCP request. Retention depends on the data category.

The MathGPT application keeps the source IP address in an in-memory rate-limit bucket for no more than five minutes.
MathGPT application access and security logs are retained for no more than 30 days unless a longer period is required to investigate active abuse or comply with law. They do not intentionally contain tool arguments or generated answers.
Task inputs and outputs are held in application memory only long enough to complete and return the request; the MCP implementation does not write them to the MathGPT database or solver history.
OpenRouter, the selected model provider, hosting provider, reverse proxy, content-delivery provider, OpenAI, and the MCP client may retain data under their own terms and retention schedules. MathGPT.now cannot delete copies controlled by those providers.

Your plugin controls

Using the plugin is optional. You can disable or remove it in ChatGPT or Codex and can choose not to submit sensitive text. Because MathGPT.now does not create an account or persistent MCP task history, there is no saved plugin conversation for MathGPT.now to show or delete. You may email [email protected] to ask about access records, request deletion where a record can be identified, or raise a privacy question. Removing the plugin stops future calls but does not delete copies already controlled by OpenAI, your MCP client, OpenRouter, or a selected model provider.

Children, changes, and questions

This site is written for students, and plenty of them are under 18. We keep the account record as small as we can for exactly that reason: an ID, an email, a name, and a picture link is not a profile of a child. If you are a parent or a school and you want an account removed, email us from an address connected to it and we will do it. If this policy changes, the page changes with it, and the change is made in the same update as the code it describes. Questions go to [email protected], and the terms of use cover the rest of the relationship between you and the site.

Make the choice that fits the material

Match your caution to the material, not to the convenience. If a problem can be done in a calculator, it never leaves your browser at all, and that is the most private option on the site. If you need the tutor, crop the photo to just the math and delete names, class details, and anything else in the frame first. On a shared or school computer, sign out and clear site data when you finish, because saved work belongs to the browser rather than to you.

Questions people ask about this page

Do you sell or share my data?

We do not sell data, run ads, or pass personal data to a data broker. The public website uses first-party Matomo analytics at tracking.mathgpt.now. A tutor or plugin request is also processed by our hosting and delivery providers, OpenRouter, and the selected model provider as described above.

Is my uploaded homework photo stored on your servers?

The image itself is not. It is read into memory, checked for type and size, encoded into the request, sent to the AI provider, and dropped when the request finishes. It is never written to the database and never written to disk by this application. The answer written from it is saved to your solver history, along with your typed question or, if you typed nothing, a fixed placeholder line. Delete that conversation and both are gone. What the provider keeps is up to the provider, so crop out anything you would not want leaving your device.

Do you keep the problems I ask the tutor?

Yes, for signed-in people, because that is the feature: your questions and the tutor's answers are saved to your account and listed at your solver history, newest first. Only you can see them; every read and every delete is matched against your own account id, and asking for somebody else's conversation returns a plain "not found". Press Delete on any conversation to remove it permanently.

Why do I have to sign in for the tutor but not the calculators?

Because they cost different amounts to run. The calculators run in your browser and cost us nothing per use, so they are open to everyone with no account. Each tutor answer is a paid request to an AI provider, and an account is the simplest way to stop that being abused.

How do I get my account deleted?

Email [email protected] from the address on the account and say you want it deleted. We remove the row from the users table, and the database removes every conversation and message attached to it at the same time. There is no delete button for the whole account in the interface yet, and we would rather tell you that than pretend otherwise. Individual saved conversations you can delete yourself at /history.

Do you use cookies to follow me around the internet?

No cross-site advertising profile is created. The website uses the mathgpt_session sign-in cookie and may use first-party _pk_* Matomo analytics cookies. You can clear or block those cookies in your browser.