Privacy Policy

1. Who we are

ClankerRank is a coding challenge platform where users test their AI prompting skills by solving programming problems. This policy explains what data we collect, why, and your rights regarding that data.

2. Data we collect

When you sign in with GitHub, we receive and store:

• Username — your public GitHub username
• Display name — your public profile name
• Avatar URL — a link to your public profile picture
• Email address — from your GitHub account, stored only if you opt in to email notifications

All of this information (except email) is already publicly available on your GitHub profile. Your email address is only stored if you explicitly opt in to receive email notifications.

When you use the platform, we also store:

• Prompts you submit — the text instructions you write for each problem
• Generated code — the AI-generated code from your prompts
• Scores and results — test pass/fail counts, score breakdowns, and execution times
• Rating and statistics — your overall rating, tier, problems solved, and submission count

3. How we use your data

• To display your profile and statistics on the public leaderboard
• To compute scores, ratings, and track your progress
• To show community solutions (your prompts and code are visible to other users only after they solve the same problem)
• To enforce rate limits (daily submission count per user)
• To send you email notifications you have opted into (new problems, weekly recaps, streak reminders)

We do not use your data for advertising, profiling, or selling to third parties.

4. Third-party services

We share limited data with the following services to operate the platform:

5. Email communications

Email notifications are entirely opt-in. We will never send you emails unless you explicitly consent. If you opt in, you may receive:

• New problem alerts — when a new challenge is published
• Weekly digest — a summary of your stats and new problems
• Streak reminders — a nudge if you're about to lose your submission streak

You can unsubscribe at any time via the one-click unsubscribe link in every email. When you unsubscribe, we stop all email communications immediately.

6. Cookies

We use only strictly necessary cookies to maintain your authentication session. These cookies are required for the sign-in feature to work and are exempt from consent requirements under the ePrivacy Directive (Article 5(3)).

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

7. Data retention

Your data is stored for as long as your account exists. When you delete your account, all associated data is permanently removed from our systems, including your profile, all submissions, test results, scores, and daily usage records. This deletion is immediate and irreversible.

8. Your rights

Depending on your jurisdiction, you have the following rights:

• Right to access — your profile, submissions, and scores are visible to you in the app at all times
• Right to deletion — you can permanently delete your account and all associated data from your profile settings
• Right to portability — your submissions and scores are accessible through your profile page
• Right to rectification — your username and display name come from your OAuth provider; update them there to change them here
• Right to object — you may delete your account at any time to cease all data processing

These rights apply under the EU General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act (DPDPA), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

9. Lawful basis for processing

We process your data on the following legal bases:

• Consent — by signing in and using the platform, you consent to the processing described in this policy
• Legitimate interest — displaying public leaderboards and community solutions to operate the platform
• Contract performance — processing necessary to provide the service you requested

10. Children's privacy

ClankerRank is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will promptly delete it.

11. Security

All data is transmitted over HTTPS and encrypted at rest in our database (Supabase/PostgreSQL). Authentication is handled by industry-standard OAuth 2.0 providers. We do not store passwords — authentication is delegated entirely to GitHub and Google. Row-level security policies ensure users can only access their own submission data.

12. Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

13. Contact

For any privacy-related questions, data access requests, or account deletion requests, please reach out at support@clankerrank.xyz or use the account deletion feature in your profile settings.