Privacy notice

Without an account

• Your code, when you press Run or Check. It is sent to the simulator server, compiled and run in an isolated sandbox, and the result is sent back. The code is deleted when the run ends. It is not stored, read by anyone or used for anything else.
• Server logs. For each request the server records the time, the address it came from (your IP address), the page or service asked for, and, for a run, the simulator, how long it took and whether it passed. Logs never contain your code. They are kept for 14 days to keep the service working and to stop abuse, then deleted.
• Your browser. Code drafts, quiz progress and your chosen theme are saved in your own browser storage, on your device only. Clearing the site data in your browser removes them.

With an account

Signing in is optional and uses your Google account. Accounts are only for people aged 18 or older.

• From Google: your Google account number, name, email address and the address of your profile picture. Google tells the site nothing else, and the site never sees your Google password.
• Your Bug Hunt results: which problems you attempted, how many full checks you ran, whether you solved them or opened the solution first, and your ratings.
• A fingerprint of accepted answers: a one-way hash of your code when a full check runs, used only to spot identical answers copied between accounts. The code itself is not kept.
• When you agreed to these terms and confirmed you are 18 or older.
• A sign-in cookie that keeps you signed in for 30 days, and a short-lived cookie (10 minutes) while a Google sign-in is in progress. There are no advertising or tracking cookies.

This is used only to run your account: to show your rating and progress, to open the locked problems and themes, and to keep the rating fair.

Who else is involved

• Cloudflare carries all traffic to the site, to deliver pages quickly and block attacks, and so sees the same request details as the server logs.
• Google handles sign-in for those who choose it, and serves the fonts the pages use, so your browser asks Google's servers for them.
• The server is a rented machine in a data centre in Delhi NCR, India, where accounts and logs are stored.

Nothing is sold, shared for advertising or used to train anything. There is no analytics service.

How long it is kept, and deleting it

Account data is kept until you delete the account. Delete it at any time from your profile page (Delete my account): your account, results, ratings and sign-in records are removed at once. Copies in the server's backups are overwritten within 14 days.

Problem difficulty ratings that your results helped adjust stay, because they contain nothing about you.

Your rights and questions

Under India's Digital Personal Data Protection Act, 2023, you can ask what data is held about you, ask for it to be corrected or deleted, and raise a complaint. Write to [email protected] with the email address of your account; you will get an answer within 30 days. If you are not satisfied with the answer, you may complain to the Data Protection Board of India.

If this notice changes, the new version is posted here with its date, and signed-in users are asked to agree again before a change that affects what is collected.