Notice 02Revised 15 September 2026
Privacy.
Reading this site stores nothing about you. Signing in stores the short list below, and every line of it is yours to export, correct or delete.
If you only read the site
Reading public pages needs no account and stores nothing about you. We run no analytics, advertising or tracking scripts. The only cookies this site sets are the sign-in session cookies described below.
What signing in stores
From GitHub: your numeric GitHub id, your handle, your avatar address and your email. The numeric id is how merged pull requests are matched to you.
From Google: your name, avatar address and email.
We never receive your password, your private repositories, or permission to act on either account.
What the site records as you take part
Your profile: handle, display name, chapter, whether your profile is public, your referral code and who referred you.
Your ledger: every XP and points line with its time, reason and source, including session attendance, merged pull requests, grants, reversals and Arena stakes, results and refunds.
The Arena: the challenges you issue and accept, the answers you submit in duels with their timings, and the result.
Age: the time you confirmed you are 18 or older, and nothing else. We do not ask for or store a date of birth or any document.
Integrity records: rate-limit attempts on session codes and automated flags for unusual Arena patterns, reviewed by administrators. Administrator actions are logged permanently.
What is public
Profiles are public by default: display name, handle, avatar, chapter, level, title, XP, streak, Arena record and your contribution timeline. Switching your profile to private in Settings removes you from public standings and member lists. Community totals, such as XP earned this week, still count your activity without naming you.
Who processes it
Supabase stores the database and runs sign-in, in its Mumbai region. Vercel hosts the website and processes standard request information such as IP address and browser in order to serve pages. GitHub and Google handle sign-in on their side under their own privacy terms.
We do not sell, rent or share personal data with anyone else.
How long it is kept
Your account data is kept while your account exists. When you delete your account in Settings, your profile closes immediately: your name, avatar and GitHub handle are removed and you leave every public list.
Ledger lines are kept after deletion without your identity, because the ledger must stay balanced for every other member's standings and Arena results to remain correct.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask what personal data we hold about you, ask for it to be corrected, ask for it to be erased, and raise a grievance. Most of this you can do yourself: your ledger is exportable as CSV from your hub, and your profile and deletion controls are in Settings.
For anything else, contact any founder through the community group or on LinkedIn. You do not need to explain why you are asking.
Age
The community is intended for people aged 16 and over. The Arena is limited to members who confirm they are 18 or older. If you believe we hold data about a child, tell us and it will be removed.
Changes
If this notice changes, the revision date changes with it, and material changes are announced to members before they take effect.