Privacy Policy
Last updated: February 23, 2026
1. Introduction
SQL Quest ("we," "our," or "us") operates the website sqlquest.app and its associated services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
Account Information: When you create an account, we collect your username, email address, and password (stored securely via Supabase Auth with industry-standard hashing).
Usage Data: We collect information about how you use SQL Quest, including challenges completed, queries executed, scores, XP earned, streak data, and learning progress. This data is used to personalize your experience and track your improvement.
Payment Information: Payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We receive a confirmation of your subscription status from Stripe.
Automatically Collected Data: We may collect your IP address, browser type, device information, and pages visited through analytics tools to improve our service.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the SQL Quest platform
- Personalize your learning experience (AI tutor, skill recommendations)
- Process payments and manage your Pro subscription
- Send transactional emails (account verification, password reset, receipts)
- Analyze usage patterns to improve our content and features
- Prevent fraud and abuse
4. Data Storage and Security
Your data is stored using Supabase (hosted on AWS infrastructure) with encryption at rest and in transit. We implement industry-standard security measures including HTTPS, secure authentication, and regular security reviews. No system is 100% secure, but we take reasonable precautions to protect your data.
5. Data Sharing
We do not sell your personal information. We share data only with:
- Supabase: Database hosting and authentication
- Stripe: Payment processing
- Anthropic: AI tutor functionality (queries are sent to Claude AI; no personally identifiable information is included)
- Vercel: Website hosting
- Analytics providers: Aggregated, anonymized usage data
We may disclose information if required by law or to protect our rights.
6. Cookies and Local Storage
SQL Quest uses browser localStorage to cache your learning progress for faster loading. We may use cookies for analytics and session management. You can clear localStorage through your browser settings, though this may reset your local progress cache.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your account and associated data
- Export your learning progress data
- Opt out of marketing communications
To exercise these rights, contact us at support@sqlquest.app.
8. Children's Privacy
SQL Quest is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such data, we will delete it promptly.
9. International Users
SQL Quest is operated from the United States. If you access our service from the EU, UK, Turkey, or other regions with data protection laws, your data may be transferred to and processed in the US. By using SQL Quest, you consent to this transfer.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
11. Contact
For privacy-related questions, contact us at support@sqlquest.app.