Privacy Policy

Depending on how you use Codey, we may collect:

• Account information: your email address, Supabase authentication identifier, account creation date and session information.
• Submission information: source code, selected programming language, test inputs, execution output, pass or fail status, failed-case details, runtime, memory use and submission timestamps.
• Progress information: attempted and solved problems, submission history and related problem status.
• Activity analytics: submission frequency, acceptance rates, active days, language usage, active time spent on problems and other statistics derived from your activity.
• Browser-stored information: selected programming language, theme, locally saved editor code and similar preferences stored on your device.
• Technical information: IP address, browser or device information, request timestamps, security events and diagnostic logs that may be processed by Codey's hosting, authentication and infrastructure providers.
• Communications: your email address and any information you include when contacting the operator about support, privacy or account deletion.

Codey does not ask you to provide special-category information such as health, biometric, religious or political information. Do not place personal, confidential or sensitive information in source code or test inputs.

We collect information:

• directly from you when you create an account or contact us;
• when you run or submit code, solve problems or use account features;
• automatically when Codey records submissions, problem progress, activity timestamps and active time;
• through authentication, hosting, security and diagnostic processes; and
• from service providers that operate parts of Codey on our behalf.

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether your rights and interests override those interests.

An email address is required to create an account and use features that save submissions, problem progress and personal analytics. If you do not provide an email address, you cannot create a Codey account.

Source code and relevant execution inputs are required when you ask Codey to run or assess a solution. If you do not provide them, Codey cannot complete that execution or submission request.

When you use Codey's run or submit features, your source code, selected programming language, execution instructions and relevant test inputs may be sent to JDoodle for remote execution.

Do not include:

• passwords, authentication tokens, API keys or private keys;
• personal or financial information;
• confidential business information;
• proprietary code that you are not permitted to disclose; or
• any other secret or sensitive material.

Codey is designed for programming practice, not for processing confidential or production data.

Codey uses strictly necessary authentication cookies to keep you signed in, protect your session and provide account features.

Codey also uses browser storage on your device to remember settings such as your theme, selected programming language and locally saved editor code. You can clear this information through your browser, although doing so may sign you out or remove locally saved preferences and code.

Codey does not currently use cookies or browser storage for targeted advertising or cross-site tracking. If non-essential analytics or advertising technologies are introduced in the future, this policy will be updated and consent will be requested where required.

We may share or make personal information available to the following service providers:

• Supabase provides authentication, database storage and related infrastructure. It may process account, submission, progress and analytics information.
• Vercel hosts and delivers the website. It may process IP addresses, request information, browser or device information and technical logs.
• JDoodle provides remote source-code execution. It may process submitted source code, programming language information, execution instructions and relevant test inputs.

Information may also be disclosed:

• to professional advisers or technical support providers where reasonably necessary and subject to appropriate confidentiality obligations; or
• to courts, regulators, law-enforcement bodies or other authorities where disclosure is required by law or necessary to protect legal rights.

We do not sell your personal information or share it with third parties for their own targeted advertising.

Supabase, Vercel, JDoodle and their subprocessors may process personal information in countries outside the United Kingdom. Data-protection laws in those countries may differ from UK law.

Where UK data protection law restricts an international transfer, we rely on an applicable transfer mechanism made available by the relevant provider, such as UK adequacy regulations or contractual safeguards.

You may contact us for further information about safeguards relevant to your information.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. In general:

• account, submission, progress and analytics information is generally kept while your account remains active;
• when you delete your account or request deletion, account-associated information is deleted or anonymised from active systems unless limited information must be retained for security, legal or dispute-resolution purposes;
• browser-stored preferences and locally saved code remain on your device until you clear them through your browser;
• support and privacy communications are kept only while needed to respond to the request and maintain an appropriate record; and
• backups and provider logs may remain for a limited period under the relevant provider's backup, security and deletion schedules.

We may retain anonymised or aggregated statistics that no longer identify you.

We use reasonable technical and organisational measures intended to protect personal information, including authentication controls, restricted database access and encrypted transmission provided by the relevant infrastructure services.

No internet service can guarantee absolute security. You are responsible for protecting your login credentials and avoiding sensitive information in submitted code and test inputs.

Depending on the circumstances and the lawful basis used, UK data protection law may give you the right to:

• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your information in certain circumstances;
• request restriction of processing in certain circumstances;
• receive certain information that you provided in a portable format;
• object to processing based on legitimate interests; and
• complain to the Information Commissioner's Office about how your personal information is used.

To exercise any of these rights, submit a request through the Contact page. We may ask for information reasonably needed to verify your identity. Data-protection rights are not absolute and may be limited by applicable law.

Codey automatically compares program output with configured expected results and calculates personal learning statistics. These processes provide programming-practice feedback only and do not make decisions that produce legal or similarly significant effects about you.

Codey is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information, contact us so that we can investigate and, where appropriate, delete the information.

Users under 18 should use Codey only with the permission and supervision described in the Terms and Conditions.

We may update this Privacy Policy when Codey's features, service providers or legal obligations change. The date at the top shows when it was last updated. Material changes may also be communicated through the service where reasonably practical.

If you have a question about this Privacy Policy, how your information is handled, or would like to make a privacy-related request, please use the Contact page.

If you have a concern about how your personal information has been handled, please contact us first so that we have an opportunity to address it. You also have the right to complain to the UK Information Commissioner's Office. Information about making a complaint is available on the ICO website.

Your use of Codey is also governed by the Terms and Conditions.