Privacy Policy

What we collect

• Account and sign-in: your email address, account identifier, and profile details supplied through Clerk. If you use Google sign-in, Google and Clerk provide the basic identity details needed to create or access your account, such as your email address and name. We do not request access to your Google Drive, Gmail, or other Google content.
• Learning: exercises completed, completion dates, and attempt counts. SQL you enter is sent to our server to run and grade against sample data; the query text is not saved in your progress record. Free exercise progress may be stored locally in your browser before you sign up.
• Billing: Stripe handles checkout, payment details, invoices, and subscription management. We store Stripe customer and subscription identifiers and subscription status so we can grant access. We do not store your card number.
• Emails: your email address and reminder preference, plus records needed to avoid sending duplicate learning reminders. We send service and learning emails through Resend.
• Usage and attribution: page visits, exercise actions, and sign-up or checkout events through PostHog, plus campaign or referring-site details when available. We do not send the SQL text you write to PostHog. Hosting services may also process technical logs such as IP address, browser information, and request time for security and operation.

Why we use it

We use account, progress, and billing data to provide the service and your subscription. We use technical logs to keep the service secure and working. We use limited usage data to understand and improve the product and to measure which channels bring learners to it. We send learning reminders based on your account activity; you can turn these off at any time. Where applicable, our legal bases are performance of our contract, our legitimate interests in operating and improving the service, compliance with legal obligations, and your consent for analytics cookies.

Cookies and analytics choices

PostHog can count visits and exercise activity without analytics cookies. If you accept the cookie choice shown on the site, PostHog may use cookies to link visits and we may save first-visit attribution in your browser and account. If you decline, analytics stays cookieless and first-visit attribution is not saved to your account. Clerk may use essential cookies or similar storage to keep you signed in. You can change your analytics choice by clearing this site's browser storage and choosing again when the banner appears.

Who receives data

We use Clerk for authentication, MongoDB for account and progress storage, Stripe for payments and subscriptions, Resend for email delivery, PostHog for analytics, and Vercel for hosting. These providers process data to deliver their parts of the service. Some processing may take place outside Greece, including through our US-hosted PostHog project. We rely on the relevant provider arrangements and applicable transfer safeguards where required.

How long we keep it

We keep account and learning data while your account is active and for a reasonable period afterward to handle requests, disputes, security issues, or legal obligations. Billing records may need to be kept longer under applicable law. You can ask us to delete your account data; we will explain if any records must be retained. Clearing your browser removes locally stored free-exercise progress and attribution from that browser.

Your choices and rights

You can turn off learning reminders from your dashboard or the link in a reminder email. You can manage or cancel your subscription through Stripe's billing portal from your dashboard. Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing. You can withdraw analytics cookie consent. Contact info@malamasdevs.com to exercise these rights. If you are in the EEA, you may also complain to your local data protection authority.

Changes

We may update this policy as the service changes. The date above shows when it was last revised. Material changes will be explained through the site or by email where appropriate.