Privacy Policy

Last updated: November 7, 2025

1) What this policy covers

This Privacy Policy explains what we collect, why we collect it, and how you can control your information when you use GroupBySQL.

2) Data we collect

• Account data (optional): Email, display name, and profile image when you sign in (e.g., via Google). If you don’t sign in, we don’t collect account data.
• Saved work: Your SQL attempts, challenge progress, and settings (to let you resume and review).
• Product analytics: Pages viewed, buttons clicked, load times, anonymized device info, rough location from IP (city/country level) to improve reliability and UX.
• Cookies & local storage: Used for session/auth, preferences, and remembering progress.

3) How we use data

• Operate the service (auth, saving attempts, loading content)
• Improve product quality and performance
• Understand feature usage to plan roadmap
• Communicate important updates and policy changes

4) Legal bases (EEA/UK)

• Contract: To provide the service you request
• Legitimate interests: Product analytics, security, and abuse prevention
• Consent: Where required for certain cookies or communications

5) Sharing & processors

We do not sell your personal data. We use service providers (processors) to run the platform, such as hosting, authentication, and analytics. These providers only process data on our behalf and under contract.

6) Cookies and local storage

We use strictly necessary cookies for login and security, and functional storage to remember preferences. Some analytics may set their own cookies. You can control cookies in your browser settings; disabling them may affect features like sign-in.

7) Data retention

• Account data and saved work: kept while your account is active.
• Analytics: retained for a limited period necessary to analyze usage and improve the service.
• We may retain minimal records to comply with law or resolve disputes.

8) Your rights

• Access, correct, or delete your data
• Export your saved work (on request)
• Object to or restrict certain processing (where applicable)
• Withdraw consent where processing relies on consent

To make a request, email hello@groupbysql.com. We may ask you to verify your identity.

9) Security

We use reasonable administrative, technical, and physical safeguards to protect data. No method of transmission or storage is 100% secure.

10) Children’s privacy

GroupBySQL is not intended for children under 13, and we do not knowingly collect personal data from them.

11) International transfers

Your data may be processed in countries different from where you live. Where required, we use appropriate safeguards for cross-border transfers.

12) Changes to this policy

We may update this Privacy Policy. If changes are material, we’ll notify you in-product or by email when feasible. Continued use after changes means you accept the updated policy.

13) Contact

Email: hello@groupbysql.com