Privacy Policy

1. Information Collection

We collect and process the following types of information:

1.1 Account Information

• OAuth authentication data (GitHub, Google)
• Email address
• Username and display name
• Profile picture

1.2 Usage Data

• Challenge attempts and completions
• Lab deployment history
• XP and achievement progress
• Comments and interactions

1.3 Payment Information

• Processed securely through Stripe
• Pro access purchase history
• Gift card redemptions

2. Data Usage

Your data is used for the following purposes:

• Providing and improving the Platform services
• Managing user accounts and authentication
• Processing one-time Pro access payments
• Tracking Pro access duration
• Tracking challenge progress and achievements
• Preventing abuse and maintaining security

3. Data Protection

We implement various security measures including:

• Secure data transmission (SSL/TLS)
• Encrypted data storage
• Regular security audits
• Access controls and monitoring

4. User Rights

You have the right to:

• Access your personal data
• Request data correction or deletion
• Export your data
• Opt out of promotional communications
• Set your profile to private

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• Personal data is removed within 30 days
• Anonymous usage data may be retained
• Payment records are kept as required by law

6. Third-Party Services

We use the following third-party services:

• Stripe for payment processing
• OAuth providers for authentication
• Cloud providers for hosting

7. Security Monitoring

We monitor Platform usage for security purposes. This includes:

• Logging of access attempts
• Detection of suspicious activities
• Analysis of usage patterns
• Automated threat detection

8. Updates to Privacy Policy

We may update this privacy policy at any time. Users will be notified of significant changes.

9. Contact Information

For privacy-related inquiries, contact:

• GitHub: @asleepynerd
• Twitter: @asleepingnerd

10. Technical Data Collection

We automatically collect:

• IP addresses (stored for up to 72 hours for security monitoring)
• Lab deployment metrics
• Challenge completion timestamps
• Error logs for platform stability

11. Security Practices

Our security measures include:

• 72-hour IP address logging for threat detection and prevention
• Regular security audits of lab environments
• Automated threat detection systems
• Rate limiting on API endpoints
• Secure session management
• Database encryption at rest

12. Data Processing

We process your data for:

• XP calculation and leaderboard rankings
• Pro access status management
• Payment processing
• Lab deployment and monitoring
• Security threat detection (including temporary IP logging)

13. User Content Rights

Regarding user-generated content:

• Comments and submissions may be monitored
• We may remove inappropriate content
• We don't claim ownership of your submissions
• You grant us license to display your content
• Private profiles still have data stored securely

14. Data Breach Procedures

In the event of a data breach:

• Users will be notified within 72 hours
• Affected data will be identified and secured
• Relevant authorities will be notified if required
• Security measures will be reviewed and updated

15. Cookie Usage

We use cookies only for:

• Authentication and session management
• User preferences storage
• Security monitoring

16. Data Retention

Our data retention policies:

• IP addresses are automatically deleted after 72 hours
• Account data is retained while your account is active
• Payment records are kept as required by law
• Lab deployment logs are kept for security purposes
• Challenge progress is retained until account deletion