Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, update your profile, or use our services:

• Account information: email address, username, display name, and profile picture.
• OAuth data: if you sign in via GitHub, Google, or Discord, we receive your public profile information from those providers.
• Content you create: forum posts, code snippets, comments, and messages.
• Usage data: pages visited, features used, and interactions within the platform.
• Technical data: IP address, browser type, device information, and cookies (session cookies only).

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the CommitCamp platform.
• Authenticate your identity and manage your account session.
• Personalize your experience (feed, recommendations, achievements).
• Enable community features such as following other users, reactions, and leaderboards.
• Send you important service notifications (password resets, security alerts).
• Calculate XP, levels, streaks, and badges for the gamification system.
• Analyze platform usage in aggregate to improve the product.

We do not sell your personal information to third parties.

3. Third-Party Services

CommitCamp integrates the following third-party services:

• Supabase — database, authentication, and file storage. Your data is stored on Supabase's infrastructure.
• GitHub OAuth — for sign-in. We receive your public GitHub profile (username, email, avatar).
• Google OAuth — for sign-in. We receive your public Google profile (name, email, avatar).
• Discord OAuth — for sign-in and optional Discord messaging integration.
• Resend — for transactional emails (authentication, notifications).
• Google Gemini / Groq — for the AI Assistant feature. Messages sent to the AI assistant may be processed by these providers. We do not store AI chat history.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or security reasons. Content you have posted (forum posts, snippets, comments) may be anonymized rather than deleted to preserve the integrity of community discussions.

5. Cookies

We use only essential session cookies required for authentication (managed by Supabase). We do not use advertising cookies or third-party tracking cookies. You may disable cookies in your browser, but this will prevent you from logging in.

6. Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), Row Level Security (RLS) on all database tables, and hashed passwords. We never store your OAuth provider passwords. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the data we hold about you.
• Correction: update inaccurate data via your profile settings.
• Deletion: request deletion of your account and associated data.
• Portability: request an export of your data in a structured format.
• Objection: object to certain processing activities.

To exercise any of these rights, contact us at privacy@commitcamp.com.

8. Children's Privacy

CommitCamp is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of CommitCamp after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@commitcamp.com
• Website: commitcamp.com