Privacy Policy

This Privacy Policy explains how Syntax Sprint (“we”, “us”) handles personal data. We've tried to keep it in plain English. It applies to our UK and US beta and to anyone else who uses the service. If anything is unclear, email us at support@syntaxsprint.io.

What Syntax Sprint is

Syntax Sprint is a web app for practising data and coding questions — short drills that build recall of pandas, Python, SQL, and similar syntax. You read a prompt, type a one-line answer, and we tell you whether it's right and schedule it to come back later.

What data we collect

• Account data. If you sign up, we store your email address and authentication details. If you join the waitlist, we store the email and optional name you submit, along with when you confirmed that you are at least 16 and accepted our Terms. We do not collect your date of birth or identity documents.
• Product usage data. Your practice activity — which drills you saw, whether your answers were correct, how long you took, your streaks and progress. This is what makes spaced repetition and your stats work.
• Reports and support. If you report a drill or contact us, we store the reason, optional note, message, and information needed to respond. Please do not include sensitive or confidential information.
• Security data. Our systems receive ordinary request information such as IP address, browser details, timestamps, and error logs. For abuse prevention, we temporarily store a one-way hash derived from the requesting IP address.
• Analytics data (optional). If you accept analytics, PostHog records the pages and explicit product events described in our Cookie Policy, along with device and browser information, approximate location derived from IP, and a random browser identifier. We do not send PostHog your account email or account ID, record session replays, or automatically capture the text you click or type.

What we deliberately do not collect

• We do not store password fields or the raw free-text you type into answer boxes. Your answer is checked on our application server and discarded; we retain only metadata — question ID, topic, difficulty, whether you were correct, and time taken.
• We do not intentionally collect special-category (“sensitive”) personal data (such as health, ethnicity, religion, or political views). Please don't enter such information into the app.

Who processes your data

We use trusted third-party providers to run Syntax Sprint. They process data on our behalf under their own security and data-processing terms:

• Supabase — authentication, database, account emails, and keeping you signed in.
• PostHog — anonymous product and web analytics, only if you accept analytics. We use its EU ingestion service.
• Vercel — hosts and delivers the website and its server functions.

These providers may use group companies or subprocessors outside the UK or EEA. Where restricted-transfer rules apply, we use the provider's applicable contractual safeguards or an adequacy mechanism. Contact us if you want information about the safeguard used for your data.

Why we use your data and our legal basis

• To run your account and the core product (sign-in, saving progress, scheduling drills). Legal basis: performance of our contract with you.
• To operate, secure, prevent abuse of, and improve the core service. Legal basis: our legitimate interests in running a safe and reliable service, balanced against your rights.
• For optional analytics to understand usage and improve the product. Legal basis: your consent, which you can withdraw at any time. If you don't consent, none of this runs and you can still use the whole product.
• To respond to your waitlist request and communicate about access, security, or important service changes. Legal basis: steps towards or performance of our contract, and our legitimate interests where appropriate. We do not add waitlist applicants to a marketing list.

You can reject analytics and still use the product

Analytics is entirely optional. If you reject it, the core product works exactly the same. You can change your choice any time from the Cookie Policy page.

Age limit

Syntax Sprint is for people aged 16 or over. We ask you to confirm this without collecting your date of birth. If we learn that an account belongs to someone under 16, we may close it and delete the associated personal data. Contact us if this happens in error.

How long we keep data

• Account and practice data: while your account is active. We review accounts after 24 months without activity and will notify you before closing one.
• Waitlist entries: up to 12 months, or 90 days after an invitation is sent.
• Resolved drill reports: up to 12 months after resolution.
• IP-derived rate-limit records: up to 24 hours.
• Optional PostHog analytics: up to 12 months.
• Routine application and security logs: normally no more than 90 days, unless needed to investigate an incident or legal claim.
• Consent records: while the consent remains current; accepted analytics consent is refreshed after 12 months.

When you delete your account, live account and practice data is removed promptly. Temporary backups may retain a protected copy for up to 90 days before it is overwritten. We may retain a minimum record for longer where required by law or necessary to establish or defend a legal claim.

Your rights

Depending on your location (including under UK or EU GDPR and some US state laws), you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To request an export or deletion of your data, or to exercise any other right, email support@syntaxsprint.io. We may need to verify your identity and will respond within the timeframe required where you live.

You can also make a privacy complaint at that address. We will acknowledge it within 30 days and respond without undue delay. If you're in the UK, you can also complain to the Information Commissioner's Office at ico.org.uk. EU residents may contact their local data-protection authority.

We do not sell your personal data

We do not sell your personal data, and we don't share it for third-party advertising.

Automated processing

The service automatically grades drills and schedules practice. It does not make decisions with legal or similarly significant effects about you, and the product does not use a runtime AI service.

Changes to this policy

We may update this policy as the product evolves. We'll change the “last updated” date above and, for significant changes, aim to give you notice.

Contact

Questions about privacy? Email support@syntaxsprint.io. Data controller: Syntax Sprint.