Privacy Policy
Last updated: March 2025
1. Information We Collect
We collect information you provide directly to us or that is generated through your use of codemirr.
Account Information
- Email address and display name
- Profile picture (provided by your OAuth provider)
- Password hash (if you register with email — passwords are never stored in plain text)
- Authentication provider and provider account ID (Google, Discord, or GitHub)
Learning Data
- Lesson completion status and progress records
- Quiz answers and scores
- Bookmarks and study notes you create
- Spaced-repetition review card history (daily reviews feature)
- Lesson ratings, helpful/not-helpful votes, and optional comments
Subscription & Payment Data
- Paddle subscription ID and customer ID
- Subscription status and renewal date
- We do not store payment card details. All payment processing is handled by Paddle, our payment processor.
Contact Messages
When you submit the contact form, we store your name, email address, selected topic, and message content.
Session Data
We store session tokens to keep you logged in between visits. Sessions expire automatically.
2. How We Use Your Information
- To provide and personalise the codemirr learning experience
- To track your learning progress and display it on your dashboard
- To manage your Pro subscription and verify access rights
- To respond to your contact form submissions
- To improve content quality using aggregated, anonymised feedback data
- To maintain platform security and prevent abuse
3. Third-Party Services
We share limited data with the following third parties to operate our service:
Paddle
Payment processing and subscription management. Paddle acts as a Merchant of Record and handles all payment data under their own privacy policy.
Google, Discord, GitHub
OAuth authentication providers. When you sign in with these services, they share your name, email, and profile picture with us as permitted by their terms.
Neon (Database)
Our database is hosted on Neon's serverless PostgreSQL platform. Your data is stored in an encrypted database within the EU/US regions.
4. Data Security
We use industry-standard security measures including HTTPS encryption, bcrypt password hashing, and secure session token management. Access to user data is restricted to authorised administrators only.
5. Data Retention
We retain your account and learning data for as long as your account is active. Contact messages are retained for 12 months. You may request deletion of your account and associated data by contacting us.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your learning progress data
7. Contact
For privacy-related questions or requests, contact us at support@codemirr.com.