Policies
Privacy policy
Last updated July 2026
We keep what is needed to run your account and nothing else. Your data is not sold, not shared with advertisers, and not used to train anything.
Who we are
StudiesSprint is the data controller for the information described here. Contact hello@studiessprint.com about anything on this page.
What we hold
- Account: name, email, a one-way hash of your password (never the password itself), and optionally a username, avatar, bio, date of birth, gender, level of education and how you heard about us.
- Your work: challenge submissions and the answers you give about them, projects you publish, and reviews you leave.
- Community: your posts, comments, likes, reposts and who you follow.
- Technical: the date of your last visit, and your IP address transiently for rate limiting. We keep no analytics profile and no browsing history.
- Billing, a Stripe customer and subscription reference, plan status and renewal date. We never receive your card number.
Why, and on what basis
To provide the account you asked for, and to take payment where you chose to pay, that is performance of a contract. To keep the service secure and prevent abuse, our legitimate interest. We do not rely on consent for any of it, because none of it is optional marketing tracking.
What is public
Your profile: name, username, avatar, bio, level, projects and posts, is visible to anyone signed in. Projects are public to anyone with the link, signed in or not, so an employer can read your work without an account. Your email, date of birth, gender and level of education are never shown to other users.
Who processes it
| Who | For | Where |
|---|---|---|
| Supabase | Database hosting: accounts, progress, community posts | EU / US, depending on region |
| Stripe | Payments: card details go straight to Stripe, never to us | EU / US |
| Resend | Transactional email: password resets | US |
Some are outside the UK. Those transfers rely on the standard contractual clauses each provider publishes. Nobody else receives your data, and we do not sell it.
How long
While your account exists. Ask us to delete it and we remove your account, posts and progress within 30 days. Records of payments are kept for six years because tax law requires it: that means the charge, not your card details.
Your rights
You can ask for a copy of your data, correct it, delete it, get it in a portable form, or object to how we use it. Email hello@studiessprint.com and we'll respond within one month.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
Security
Passwords are hashed with bcrypt and cannot be read by anyone, including us. Sessions are signed tokens limited to one device at a time, and two-factor authentication is available. More detail on the security page.
Children
StudiesSprint is not intended for under-16s. If you believe a child has an account, tell us and we will remove it.
Cookies
One, to keep you signed in. No analytics, no advertising, see cookies.