This policy explains what CodeArcade collects, why, how long we keep it, who we share it with, and the controls you have. CodeArcade is a beta learn-to-code product; we try to collect as little as we can while still making the learning experience work.
What we collect
- Account info. Your email address (for magic-link sign-in), and, if you use Google to sign in, your name, profile image, and Google account id as returned by Google.
- Learning activity.The exercises and projects you attempt, the code you submit on a “Check,” pass/fail results, hints used, time spent, mastery and review scheduling, streaks, XP, gems, achievements, and quest/league progress. This is the data that lets the game adapt to you and keep your progress.
- AI tutor & generation interactions. When you ask the AI tutor for a hint or explanation, or request generated practice, the relevant prompt (which can include the exercise and the code you wrote) is sent to our LLM provider to produce a response, and we store the interaction and its cost/latency metadata for quality and abuse monitoring.
- Attribution & referral data (consent-gated).If you accept our cookie banner, we store a first-touch marketing cookie recording how you arrived — UTM parameters, a Google click id (
gclid), the referring URL, and the landing page — and, if you followed a friend’s referral link, the referral code. If you decline, none of this is set or stored. See “Cookies” below. - Payment data. If you subscribe, our payment processor Stripehandles your card details — we never see or store your full card number. We keep your subscription plan, status, trial/period dates, and the opaque Stripe customer/subscription identifiers needed to manage billing.
- Basic technical data. Standard request data such as IP address (used for rate-limiting and abuse prevention) and error/diagnostic logs so we can keep the beta running.
How we use it
- To run the Service: save your progress, adapt exercises to your level, and power streaks, reviews, and gamification.
- To provide AI tutoring and on-demand generation when you ask for them.
- To process subscriptions, trials, refunds, and referral rewards.
- To keep the Service safe and reliable: rate-limiting, abuse and fraud prevention, and debugging.
- To understand which marketing channels bring learners in — only if you consented to the attribution cookie.
- To send essential account email (magic links, trial-ending reminders, receipts) and, if enabled, the streak nudge you can turn off in Settings.
We do not sell your personal data. We do not use your private code or tutor conversations to train our own models.
Cookies
We use a small number of cookies:
- Strictly necessary. A secure, httpOnly session cookie that keeps you signed in. This is required for the Service to work and is not used for tracking.
- Consent record. A cookie remembering your choice on the banner (
ca_consent). - Attribution & referral (optional).Set only if you click “Accept.” The attribution cookie (
ca_attr, ~90 days) records your first-touch UTM/gclid/referrer, and a referral cookie (ca_ref) carries a friend’s referral code to your signup. Decline and neither is ever set.
We don’t use third-party advertising or cross-site tracking cookies.
Who we share it with
We share data only with the service providers that make the product run, and only what they need:
- Stripe — payment processing and subscription management.
- Groq — the LLM provider that generates AI tutor responses and practice content from the prompts described above.
- Google — only if you choose Google sign-in.
- Infrastructure and error-monitoring providers that host the app and help us diagnose crashes.
We may disclose data if required by law, or to protect the rights, safety, and security of CodeArcade and its users.
How long we keep it
We keep your account and learning data for as long as your account is active. When you delete your account (Settings → Delete account), we remove your personal data — profile, learning activity, code submissions, game state, tutor interactions, referrals, and attribution — from our primary database. Some records may be retained in anonymized or aggregate form (for example, billing audit logs and usage statistics with the user reference removed) as required for accounting and integrity. Backups roll off on their normal cycle.
Your rights and controls
- Export. Download a copy of your data any time from Settings → “Export my data.”
- Delete. Delete your account and personal data from Settings → “Delete account.”
- Consent. Decline the attribution cookie, or clear the
ca_consent cookie in your browser to be asked again. - Email preferences. Turn off streak nudges in Settings. Essential account and billing emails can’t be turned off while you have an account.
Depending on where you live (e.g. the EEA, UK, or California), you may have additional rights to access, correct, or restrict processing of your data. Email support@codearcadeand we’ll honor them.
Children
CodeArcade isn’t directed at children under 13, and we don’t knowingly collect their data. If you believe a child has given us personal data, email us and we’ll delete it.
Changes
As a beta product this policy will evolve. We’ll update the date above on any change and note material changes where reasonable.
Contact
Privacy questions or requests? Email support@codearcade (at our primary domain).