Privacy Policy
Last updated: 2/26/2026
1. Information We Collect
Information You Provide
- Account Information: Name, email address, and password
- Profile Data: Avatar, bio, and preferences
- User Content: Challenge submissions, discussions, and feedback
Automatically Collected Information
- Usage Data: Pages visited, features used, time spent
- Device Information: Browser type, IP address, operating system
- Cookies: Authentication tokens and preferences
2. How We Use Your Information
We use your information to:
- Provide and improve the Service
- Authenticate you and maintain your account
- Process your challenge submissions and track progress
- Send you important updates and notifications
- Analyze usage patterns to improve user experience
- Prevent fraud and ensure security
3. Information Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party services that help us operate (e.g., cloud hosting, email services)
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly agree to share information
4. OAuth Authentication
When you sign in with GitHub or Google, we receive basic profile information from these providers (name, email, avatar). We do not access your private repositories or additional data without explicit permission.
5. Data Security
We implement industry-standard security measures to protect your data:
- Passwords are hashed using bcrypt
- Authentication tokens stored in httpOnly cookies
- HTTPS encryption for all data in transit
- Regular security audits and updates
- Limited access to personal data by employees
6. Cookies
We use cookies for:
- Authentication (httpOnly cookies for security)
- Remembering your preferences
- Analytics and performance monitoring
You can control cookies through your browser settings, but some features may not work properly without them.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from non-essential emails
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where required by law.
9. Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and stored on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.