Privacy Policy
What we collect, why, where it goes, and how to get rid of it. Written in plain language — no dark patterns, no data sales.
Last updated · 16 July 2026
The short version
- We collect what the product needs to work: your account, your progress, and the things you write.
- We do not sell your data, run ads, or use advertising trackers. Our analytics is cookieless and anonymous — that's why there's no cookie banner.
- Anything you type into the AI tutor, mock interviews, or code grading is sent to third-party AI providers to produce a response.
- Code you submit for execution runs on a third-party code-execution service, not on our servers.
- You can ask us to delete your account and data at any time, and we will.
Who we are
Praxis924 is an independent, early-stage project operated by Jayant Singh. For anything in this policy — including access and deletion requests — reach us via the contact form or at jayantsingh924@gmail.com.
What we collect
Account information. Your name, email address, and password. Passwords are stored only as a bcrypt hash — we never store or see the plaintext. Optionally: a phone number and a profile photo, if you add them.
Onboarding answers. Your experience level, target role, target companies, learning goal, chosen track, focus areas, and timeline. These shape your roadmap.
Learning activity. Lesson completions, exercise and coding-challenge attempts and scores, mock interview scores, time spent on lessons, and streaks.
Things you write. Personal lesson notes, discussion comments, likes and saves, lesson contributions, content issue reports, and direct messages to other users.
Technical records. Login session records including your IP address and timestamps, kept so you can see and manage your own sessions and so we can investigate abuse.
Contact form submissions. Your name, email, topic, message, plus your IP address and browser user-agent — the last two purely to rate-limit spam.
Push notification subscriptions, only if you explicitly enable browser notifications.
Analytics
We use Plausible Analytics to see which pages get visited and roughly where traffic comes from. We picked it specifically because of what it doesn't do:
- It sets no cookies and uses no browser storage. That's why this site has no cookie banner — there's nothing to consent to.
- It collects no personal data and doesn't build a profile of you.
- It can't follow you across other websites — there is no persistent identifier.
- Your full IP address is never stored; it's used transiently and discarded.
What it records is aggregate and anonymous: page URL, referrer, and coarse country/browser/device type. We can see "40 people read the Python lesson today". We cannot see that you did.
What we deliberately don't collect
- No advertising trackers. No ad network, no pixel, no retargeting, no data brokers — and no Google Analytics (see above for what we use instead, and why).
- No payment information. There is no billing system, so there is nothing to collect.
- No tracking cookies. Your login token is kept in your browser's
localStorage, not in a tracking cookie, and it is only sent to our own API.
AI providers — read this one
This is the part most people don't expect, so it gets its own section. When you chat with the AI tutor (Lucy), run a mock interview, or submit code or an answer for AI grading, the text you wrote is transmitted to a third-party AI provider to generate the response. Depending on availability and quota, that provider may be Groq, Google (Gemini), Hugging Face, or NVIDIA. Your message is handled under that provider's own terms and privacy policy, not just ours.
Separately, when you run code in the practice workspace, the code is sent to a third-party code-execution sandbox (Wandbox by default) to be compiled and run.
The practical takeaway: don't paste secrets, credentials, personal data, or your employer's proprietary code into the tutor, the interview, or the code editor. Treat it the way you'd treat any public AI chat tool.
We send these providers the content of your prompt and the relevant lesson material. We do not send them your name, email, or account identifiers.
Other third parties
- Amazon Web Services — hosts the servers and database this application runs on.
- Our email provider — delivers transactional email (verification links, password resets, replies to your contact message). Only your email address and the message content are shared.
- Plausible Analytics — receives anonymous, aggregate page-view data. No cookies, no personal data, no cross-site tracking (see the analytics section above).
We do not share your data with anyone else, and we do not sell it. Ever — this isn't a business model we're holding open.
Why we're allowed to process it
If you're in a jurisdiction that asks for a legal basis (such as the EU/UK under GDPR, or India under the DPDP Act): we process your account and learning data to perform the contract you enter by creating an account; we process technical and anti-spam records under our legitimate interest in keeping the service working and unabused; and we process anything optional (a profile photo, push notifications) on your consent, which you can withdraw.
How long we keep it
- Account and learning data — for as long as your account exists.
- Read notifications — automatically purged after about 60 days. Unread ones are kept.
- Deleted lessons and courses — recoverable from trash for about 30 days, then permanently purged.
- Contact form messages — kept while we need them to answer you and to spot spam patterns.
Your rights and how to use them
See and correct your data: most of it is on your profile and progress pages, editable directly.
Delete your account: ask us via the contact form and we'll delete it. Being straight with you: there is no self-serve delete button yet — deletion is a manual operation we perform on request. It's on the list. Deleting your account removes your profile, progress, notes, and messages; discussion comments you posted may be removed or disassociated from you.
Get a copy of your data: ask and we'll export it for you. There's no self-serve export button either.
Depending on where you live you may also have the right to object to or restrict processing, or to complain to a data protection authority. Just ask us first — we'd rather fix it.
Security, honestly
Passwords are hashed, traffic is encrypted with TLS, sessions expire, and admin routes are access-controlled. ButPraxis924 is an early-stage project run by one person, not a company with a security team — see the security page for the unvarnished detail. Please don't store anything here you couldn't bear to lose or to see exposed.
Children
This service isn't intended for anyone under 16. We don't knowingly collect data from children. If you believe a child has created an account, tell us and we'll remove it.
Changes to this policy
If we change what we collect or who we send it to, we'll update this page and move the "last updated" date. For anything significant, we'll tell account holders by email rather than quietly editing the page.