Privacy Policy

1. Introduction

LeetCycle (“we,” “us,” or “our”) provides a web application that helps you track and review coding practice problems using spaced repetition. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website and services (collectively, the “Service”).

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Account and authentication

When you sign in with Google or GitHub, we receive information from that provider through our authentication partner (Supabase), which may include your email address, name, profile image URL, and a unique identifier from the provider. We use this to create and secure your account.

2.2 Information you provide

You may store content in the Service such as problem titles, links (for example to third-party problem pages), difficulty and topic labels, notes, review schedules, confidence ratings, and related study metadata. You may also save preferences such as daily goals or interview targets.

2.3 Usage and technical data

Like most web services, we and our hosting providers may process technical data such as IP address, browser type, device characteristics, general location derived from IP, and dates and times of requests. We may use cookies or similar technologies (including those required for session and authentication) to operate the Service.

3. How we use information

We use the information above to:

• Provide, maintain, and improve the Service
• Authenticate you and prevent fraud or abuse
• Store and sync your problems, reviews, settings, and statistics
• Respond to your requests and communicate about the Service
• Comply with law and protect rights, safety, and security

We do not sell your personal information. We do not use your data to train public machine-learning models.

4. How we share information

We share information only as needed to run the Service, including with:

• Supabase (database, authentication, and related infrastructure), which processes data under its own terms and privacy policy
• OAuth providers (Google, GitHub) when you choose to sign in with them, subject to their policies
• Professional advisers, regulators, or law enforcement when required by law or to protect rights

We may use subprocessors that host or process data on our behalf. Their handling of data is governed by agreements consistent with this policy.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete specific content within the product where that feature exists. If you wish to delete your account or request erasure, use any account or data controls we provide in the Service when available. We will delete or anonymize personal information as required unless we must retain it for legal obligations, dispute resolution, or legitimate security or backup processes.

6. Security

We use reasonable administrative, technical, and organizational measures designed to protect your information. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

7. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data-protection laws than your country. Where required, we rely on appropriate safeguards for cross-border transfers.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to you, use any self-service tools in the Service when we offer them. We may need to verify your identity before fulfilling your request.

California residents: you may have additional rights under the CCPA/CPRA, including to know, delete, and opt out of certain sharing (we do not sell personal information as defined by those laws).

9. Children

The Service is not directed to children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, we will take appropriate steps to delete it once we become aware and can reasonably verify the request.

10. Third-party sites

The Service may allow you to store links to third-party websites (for example, problem statements). We do not control those sites and this policy does not apply to them. Review their privacy practices separately.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If changes are material, we will provide additional notice as appropriate. Continued use of the Service after changes means you accept the updated policy.

12. Contact

We do not operate a public support inbox or phone line yet. When we publish a way to reach us for privacy matters, we will add it here. You can also review our Terms of Service.