What we collect, why, and what you can ask us to do about it.
In effect from 2026-08-19
Draft. This document still contains unfilled placeholders and has not been reviewed. It does not yet apply.
This policy explains what {{COMPANY_NAME}} ("we") collects when you use this site, why, and what you can ask us to do about it.
When you create an account. Your name, email address and password (stored only as a bcrypt hash, never in readable form). Optionally a phone number, a short bio, a profile picture, whether you are a student or employee, your university or organisation and job title, and links to your LinkedIn, GitHub or personal site.
When you sign in with GitHub or LinkedIn. We receive your name, email address and profile picture from that provider. We never receive your password there.
When you use the site. Posts, questions, answers and comments you write; votes and likes you cast; practice challenges and learning topics you complete; exam attempts and their results. Your contribution activity is recorded as individual events so scores can be recalculated.
When you contact us. Your name, email, and any phone number, company name and message you send. We also store a one-way keyed hash of your IP address and your browser's user-agent string, to limit automated abuse of the form. The hash cannot be turned back into an IP address.
Files you upload. Profile pictures are stored on our own servers, not a third-party host.
Some of what you provide is published deliberately. Your profile page at /u/<your-name> shows your name, picture, bio, affiliation, links, contribution rank and points, the questions you asked, the posts you published, and any certificates you earned. The contributors leaderboard ranks members by contribution points. Certificates are verifiable by serial number, and that verification page shows the holder's name, the exam and the score.
Your email address and phone number are never published.
We set a session cookie when you sign in, so you stay signed in, and a cookie remembering your light or dark theme preference. We do not use advertising or cross-site tracking cookies.
Pages that embed a video from YouTube or Vimeo load it from those services, which may set their own cookies. We request YouTube embeds through youtube-nocookie.com to reduce this, but we do not control what those providers do. Do not play an embedded video if you would rather they did not.
We do not sell your data and we do not share it for advertising. Third parties involved in running the site:
Account data is kept while your account exists. Contact enquiries are kept while we may still need them to answer you or for our records, and are deleted when they are no longer needed. Content you published stays until you or we remove it.
You can edit or clear most of your profile yourself from your account panel, including removing your profile picture. To request a copy of your data, correction of it, or deletion of your account and its content, email {{CONTACT_EMAIL}}. Deleting your account removes your profile and the content attached to it; enquiries you sent us may be retained separately as business records.
Passwords are hashed. Staff access to the admin panel is restricted by role. No system is perfectly secure, and we cannot guarantee absolute security.
This site is not intended for children under {{MINIMUM_AGE}}. If you believe a child has given us personal data, contact us and we will remove it.
If we change this policy we will update the date shown on this page. Significant changes will be announced on the site.
{{COMPANY_NAME}}, {{COMPANY_ADDRESS}}. Questions about this policy: {{CONTACT_EMAIL}}.
See also Terms and Conditions · Contact us