Privacy Policy

This policy explains what personal data we process when you use Katabench, why, and what your rights are. The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS] — privacy@katabench.com.

What we collect

• Account data — email address, display name, and password hash when you sign up.
• Submissions — the code you write and the grading results (timings, allocations, test outcomes). Stored so you can see your own history and progress.
• Usage data — pages visited and feature usage, collected with privacy-friendly analytics (no advertising trackers, no cross-site profiles).
• Payment data — purchases are processed by Paddle as merchant of record. Paddle collects and processes your payment details under its own privacy policy; we receive only what we need to operate your subscription (e.g., plan, status, country) — never your card number.
• Support correspondence — emails you send us.

This marketing website (katabench.com) sets no tracking cookies. The app (app.katabench.com) uses a session cookie strictly for authentication.

Why we process it (legal bases)

Purpose	Legal basis (GDPR)
Providing the Service: accounts, grading, history, leaderboards	Contract (Art. 6(1)(b))
Billing and subscription management	Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c))
Abuse prevention, quota enforcement, sandbox security	Legitimate interest (Art. 6(1)(f))
Product analytics and improvement	Legitimate interest (Art. 6(1)(f))
Lifecycle and product emails	Contract; consent where required — unsubscribe anytime

Code execution

Code you submit is compiled and executed in an isolated, network-less sandbox that is destroyed after each run. Submissions are retained in your account history; the execution environment retains nothing.

Sharing and processors

We do not sell personal data. We share it only with processors needed to run the Service: [HOSTING PROVIDER] (infrastructure), Paddle (merchant of record), [EMAIL PROVIDER] (transactional email), [ANALYTICS PROVIDER] (privacy-friendly analytics) — each under a data processing agreement. Where data leaves the EEA, we rely on adequacy decisions or standard contractual clauses.

Retention

Account data and submissions are kept while your account exists and deleted within [30/90 days] of account deletion, except where law requires longer retention (e.g., invoicing records). Backups roll off on a fixed schedule.

Your rights

You can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest — email privacy@katabench.com. You can also delete your account directly in the app. If you believe we’re handling your data unlawfully, you may lodge a complaint with your local supervisory authority.

Changes

We’ll post changes here and, for material changes, notify you by email or in-app notice.