Privacy Policy

Last updated: March 23, 2026

1. Who We Are

Crucible is operated by Crucible Development Group LLC. This policy describes how we collect, use, and protect your information when you use our platform.

2. Information We Collect

Information you provide

• GitHub account data: When you sign in with GitHub, we receive your username, email address, display name, and avatar URL.
• Code submissions: Code you push to ticket repositories as part of challenges.
• Account preferences: Settings you configure on your account page.

Information collected automatically

• Usage data: Pages visited, features used, and timestamps.
• IP address and user agent: Collected on signup, login, and key actions for security and fraud prevention.
• Session data: Django session identifiers for authentication.
• Payment metadata: Transaction IDs and plan details from our payment processor. We do not store credit card numbers.

3. How We Use Your Information

• Provide the Service: Authenticate you, provision challenge repos, verify submissions, and build your portfolio.
• Improve the platform: Analyze usage patterns to improve challenge quality and user experience.
• Security and fraud prevention: Detect abuse, prevent unauthorized access, and respond to payment disputes.
• Communication: Send transactional emails about your account (e.g., subscription confirmation). We do not send marketing emails without consent.

4. Information Sharing

We do not sell your personal information. We share data only with:

• Payment processor: To process purchases and manage subscriptions.
• GitHub: To create and manage challenge repositories on your behalf.
• Infrastructure providers: Hosting and database services that process data on our behalf under confidentiality obligations.
• Legal requirements: When required by law, subpoena, or to protect our rights.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Code submissions: Challenge repos are retained so you can reference and showcase them in your portfolio.
• Evidence logs: IP addresses and usage logs are retained for up to 12 months for fraud prevention and dispute resolution, then purged.
• Payment records: Retained as required by tax and financial regulations.

6. Your Rights

You can:

• Export your data: Download a copy of your account data from Account Settings.
• Delete your account: Permanently delete your account and associated data from Account Settings.
• Access and correction: Contact us to review or correct your personal information.

7. Cookies

We use a session cookie (sessionid) for authentication. We do not use third-party tracking cookies or advertising cookies.

8. Security

We use HTTPS encryption, secure session management, and access controls to protect your data. Challenge code runs in isolated sandboxed containers.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy. Material changes will be communicated via email or in-app notice. The "last updated" date at the top reflects the most recent revision.

11. Contact

Questions about your privacy? Email us at [email protected].