Privacy Policy

• Account data: email address and password (stored hashed by our authentication provider).
• Profile data you choose to add: display name, photo, bio, country, GitHub username, website and skills.
• Content: problems, solutions, comments, reports, private messages, and validation requests and files.
• Activity: reputation events, notifications, and moderation records.
• Technical data: IP address, browser and request logs kept by our hosting provider for security and reliability.

• Public: your profile (except email), problems, solutions, comments and accepted-solution evidence.
• Only you and the other person: private messages.
• Only you and your assigned reviewer (plus administrators when needed to run the service): validation cases, files, findings and reports.
• Only you: your notifications, reputation history details and email address.
• Moderators: content that has been reported, and the report itself. Reporters' identities aren't shown to the reported member.

• To provide accounts, the community, messaging and validation workflows.
• To calculate reputation and show evidence on profiles.
• To keep the platform safe: rate limits, moderation, abuse prevention and audit logs of staff actions.
• To send service emails such as account confirmation and password reset.
• Occasionally, to email you news, tips and reminders about the community (for example after a period of inactivity). Every such email has an unsubscribe link, and you can switch them off any time in Profile & settings.

We use Supabase (database, authentication and file storage) and Cloudflare (hosting, networking and security) to run the platform. They process data on our behalf under their own security and privacy commitments. We don't sell personal data or use it for third-party advertising.

We use essential cookies to keep you signed in and to secure sign-in flows. We don't use advertising or cross-site tracking cookies. To understand how the site is used, we count page visits anonymously and without cookies: we record the page, the referring website, your country and device type, and a visitor code that is a one-way hash of your IP address and browser that changes every day. We never store your IP address. Visits aren't counted if your browser sends “Do Not Track” or Global Privacy Control.

We keep your data while your account is active. Validation files can be deleted by you at any time while a case is open. When you ask us to delete your account, we delete your profile, messages and private files, and may keep public contributions in anonymised form so existing problems still make sense. Audit and security records may be kept longer where needed to protect the platform.

You can edit your profile at any time from your dashboard. To access, export, correct or delete your data, or to object to how we use it, use contact & support and choose “Privacy or data request”. Depending on where you live, you may also have the right to complain to a data protection authority.

Every database table is protected by row-level security, private files are stored in access-controlled storage with short-lived download links, and submitted code is never executed. No system is perfectly secure — please never upload production secrets or personal data.

The platform isn't intended for anyone under 16, and we don't knowingly collect their data.

We'll update the date above when this policy changes and notify members of significant changes on the platform.