Privacy Policy

We collect the following categories of information:

• Account information. When you sign up we collect your email address, a username you choose, an optional avatar image, and, if you sign in with Google, your Google account identifier, name, and profile picture URL as provided by Google.
• Authentication data. Passwords are never stored in plain text. We use our authentication provider (Supabase) to securely hash and manage credentials.
• Learning activity. Lessons completed, problems attempted, code submissions, verdicts, points, streak history, and other progress signals generated as you use the Service.
• Content you submit. Code, text, and other input you enter into editors, discussions, or forms.
• Technical data. IP address, browser type, device type, operating system, referring URLs, timestamps, and diagnostic logs (including client-side error reports) collected automatically when you use the Service.
• Cookies and local storage. We use cookies and browser storage to keep you signed in, remember your theme preference, and persist local progress.

• Provide, operate, and maintain the Service and your account.
• Grade submissions, compute points, streaks, and leaderboard standings.
• Personalize your learning path and remember your preferences.
• Communicate with you about account, security, and product updates.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Debug, monitor, and improve the reliability and performance of the Service.
• Comply with legal obligations and enforce our Terms of Use.

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract with you, our legitimate interests in operating and improving the Service, your consent (which you may withdraw at any time), and compliance with legal obligations.

We do not sell your personal information. We share limited data with:

• Service providers. Infrastructure and platform vendors that help us run the Service, including Supabase (database, authentication, storage), Cloudflare (hosting and edge delivery), Google (Sign in with Google), and DiceBear (fallback avatar generation). These vendors process data on our behalf under contractual protections.
• Public leaderboard. Your chosen username, avatar, and points are visible to other users on the public leaderboard. Do not use personal or sensitive information in your username.
• Legal and safety. When required by law, subpoena, or to protect the rights, property, or safety of GateCode, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality.

We retain account and activity data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, security, or fraud-prevention purposes.

We use administrative, technical, and organizational safeguards designed to protect your information, including row-level security on our database, TLS in transit, and hashed credentials. No system is perfectly secure. You are responsible for keeping your password confidential and for activity under your account.

• Access, correct, or update your profile from the account settings page.
• Request a copy or deletion of your personal information by emailing founder@platepals.co.
• Depending on your jurisdiction (including the EEA, UK, and California), you may have additional rights such as objection, restriction, portability, and the right to lodge a complaint with a supervisory authority.
• You may disable cookies in your browser, but parts of the Service may not function correctly without them.

GateCode is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

We and our service providers may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for these transfers.

The Service may link to third-party websites or embed third-party content. Their privacy practices are governed by their own policies and are not our responsibility.

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the effective date above and, where appropriate, by in-product notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions, requests, or complaints about this policy or your personal data can be sent to founder@platepals.co.