Privacy Policy

Last updated: July 26, 2026

1. Introduction

SQL Quest ("we," "our," or "us") operates the website sqlquest.app and its associated services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Account Information: When you create an account, we collect your username, email address, and password. Your password is never stored in plaintext and is never transmitted to us in readable form — it is combined with a unique per-account salt and hashed before it leaves your browser, and only the salt and the resulting hash are stored.

Usage Data: We collect information about how you use SQL Quest, including challenges completed, queries executed, scores, XP earned, streak data, and learning progress. This data is used to personalize your experience and track your improvement.

Payment Information: Payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We receive a confirmation of your subscription status from Stripe.

Automatically Collected Data: We may collect your IP address, browser type, device information, and pages visited through analytics tools to improve our service.

Feedback You Send Us: If you use the in-app feedback button or email us, we store your message, the email address you optionally provide so we can reply, and basic context about where you were when you wrote — the screen you were on, how many challenges you had solved, whether you were signed in, your timezone, browser and screen size. We use this only to understand and answer you.

Behavioral Analytics (Microsoft Clarity): We use Microsoft Clarity to understand how users interact with SQL Quest — heatmaps, session recordings, click patterns, and scroll depth. This helps us catch usability issues (e.g., a button that's hard to find, a layout that scrolls past the editor) without having to ask every user. Password fields, email inputs, and credit card fields are masked by default before any data leaves your browser. You can opt out via Microsoft's privacy controls.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the SQL Quest platform
• Personalize your learning experience (AI tutor, skill recommendations)
• Process payments and manage your Pro subscription
• Send transactional emails (account verification, password reset, receipts)
• Send product and learning emails to the address on your account — your weekly progress report, reminders when a streak is about to break or a skill is going rusty, notes when you leave something unfinished, and occasional messages about SQL Quest features and offers. Every one of these carries a one-click unsubscribe link and stopping them does not affect your account
• Analyze usage patterns to improve our content and features
• Prevent fraud and abuse

We do not use your email address for third-party advertising. We do not upload it to advertising platforms, and we do not build advertising audiences from it.

4. Data Storage and Security

Your data is stored using Supabase (hosted on AWS infrastructure) with encryption at rest and in transit. We implement industry-standard security measures including HTTPS, secure authentication, and regular security reviews. No system is 100% secure, but we take reasonable precautions to protect your data.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Anthropic: AI tutor functionality (queries are sent to Claude AI; no personally identifiable information is included)
• Vercel: Website hosting + first-party page-view analytics
• Microsoft Clarity: Behavioral analytics — heatmaps and session recordings with sensitive fields masked
• Resend: Email delivery — both transactional mail (password resets, receipts) and the product and learning emails described above, including whether a message was delivered and opened
• Cloudflare: Routing of mail you send to our support address so it reaches us

We may disclose information if required by law or to protect our rights.

6. Cookies and Local Storage

SQL Quest uses browser localStorage to cache your learning progress for faster loading. We may use cookies for analytics and session management. You can clear localStorage through your browser settings, though this may reset your local progress cache.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your learning progress data
• Opt out of product and marketing emails — use the unsubscribe link at the bottom of any of them, which takes effect immediately and stops all of them at once. Transactional mail you have asked for, such as a password reset or a receipt, still reaches you

To exercise these rights, contact us at support@sqlquest.app or through the feedback button inside the app.

8. Children's Privacy

SQL Quest is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such data, we will delete it promptly.

9. International Users

SQL Quest is operated from the United States. If you access our service from the EU, UK, Turkey, or other regions with data protection laws, your data may be transferred to and processed in the US. By using SQL Quest, you consent to this transfer.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact

For privacy-related questions, contact us at support@sqlquest.app.