Privacy Policy

1. Introduction

Welcome to CodeTutor ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how your personal information is collected, used, and protected when you use our website and services (collectively, the "Service").

This Privacy Policy explains our practices regarding data collection, use, and disclosure. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your username, email address, and password (stored securely using industry-standard hashing).
• Profile Information: Any additional information you choose to add to your profile.
• Communications: When you contact us, we collect the information you provide in your messages.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, links clicked, and other interaction data.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.

2.3 Information from Third Parties

If you sign in using OAuth providers (Google, GitHub), we receive basic profile information as authorized by you, including your name, email address, and profile picture.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process your requests and respond to inquiries
• Send you important updates about the Service
• Analyze usage patterns to improve user experience
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can manage your cookie preferences at any time.

4.1 Types of Cookies We Use

• Necessary Cookies: Essential for the website to function. These cannot be disabled and include authentication and security cookies.
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics). You can opt out of these.
• Advertising Cookies: Used to show relevant advertisements (Google AdSense). You can opt out of these.

4.2 Cookie Retention

Our cookies have varying lifespans. Session cookies are deleted when you close your browser. Persistent cookies may last up to 12 months for authentication purposes, and third-party analytics/advertising cookies follow their respective provider's policies.

5. Third-Party Services

We use the following third-party services:

5.1 Google Analytics (GA4)

We use Google Analytics to analyze website usage. This service may collect information about your use of our website. We have enabled IP anonymization. For more information, see Google's Privacy Policy.

5.2 Google AdSense

We use Google AdSense to display advertisements. This service may use cookies to show personalized ads based on your interests. You can opt out of personalized advertising at Google Ad Settings.

5.3 SendGrid

We use SendGrid for email communications, including password reset emails. See SendGrid's Privacy Policy.

5.4 OAuth Providers

When you use social login (Google, GitHub), these providers may collect information according to their privacy policies. We only receive the information you authorize.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in these cases:

• Service Providers: With trusted third parties who assist us in operating our Service (hosting, analytics, email).
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly agree to share information.

7. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Secure password hashing (bcrypt)
• HTTP-only cookies for authentication tokens
• CSRF protection for all state-changing operations
• Regular security audits and updates

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

8.1 GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities

8.2 CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us using the information below.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Us