1. Data Controller
For the purposes of the GDPR, the Data Controller responsible for your personal data is the administrative infrastructure of the platform.
- Organization: TheScalableDev Administration
- Contact Email: support@thescalabledev.com
2. Information We Collect
We collect only the minimum amount of data necessary to provide you with a functional coding sandbox and account management experience.
A. Data Provided Automatically via Third-Party Authentication (OAuth)
We do not manage or store passwords. When you create an account using social login providers, they securely pass us your public profile data:
- Google OAuth: We collect your email address, name, and profile picture URL.
- GitHub OAuth: We collect your email address, GitHub username, name, and profile picture URL.
B. Data Collected Dynamically via Platform Usage
To track your educational milestones and run your code safely, we process:
- Account progress, lesson completion logs, and quiz scores.
- Code snippets or architecture designs submitted to our validation engine.
C. Data Collected Automatically via Infrastructure
Our hosting provider automatically logs technical details to keep the application secure and operational:
- IP addresses, browser types, operating systems, and device identifiers.
D. Payment Information
We do not collect, view, or store your credit card or billing details. All financial transactions are handled securely by our Merchant of Record, Stripe (Managed Payments). They provide us only with non-sensitive transaction summaries (such as confirmation of a completed payment, your subscription status, and your country of origin).
3. Legal Basis for Processing (GDPR)
If you are an individual inside the European Economic Area (EEA), our legal grounds for processing your data are:
- Performance of a Contract: To create your account, track your lesson history, and fulfill your purchase access.
- Legitimate Interests: To protect our application infrastructure from cyber attacks or malicious code execution, and to monitor overall site performance.
- Consent: When you explicitly authorize Google or GitHub to share your profile information with us at login.
4. Third-Party Data Processors
We do not sell, trade, or rent your personal data to advertisers. We share your information only with trusted third-party services essential to running our application:
- Cloudflare Inc. (Hosting & Security): We use Cloudflare to host our website files, optimize page speeds, and defend against Distributed Denial of Service (DDoS) attacks. Cloudflare processes system log files and routing metadata globally under standard contractual clauses.
- Stripe, Inc. (Payments - Managed Payments): Acts as our Merchant of Record. They manage our checkout infrastructure, handle global digital tax compliance, and process your subscription or one-time lifetime payments.
- Google LLC & GitHub Inc. (Authentication): Used solely to verify your identity and authorize your secure login sessions.
6. Data Retention
We retain your account profile, progress records, and lesson logs for as long as your account remains active. If you wish to delete your account, you can request full erasure at any time by contacting us at the email listed below.
7. Your GDPR Privacy Rights
As a resident of the European Union, you hold the following statutory rights regarding your personal data:
- The Right to Access: You can request a digital copy of all personal data we hold about you.
- The Right to Rectification: You can request that we fix any incorrect profile data.
- The Right to Erasure ("Right to be Forgotten"): You can request that we permanently wipe your account and all associated progress logs from our systems.
- The Right to Data Portability: You can request an export of your account details in a standard, structured format.
8. Exercising Your Rights
To exercise any of these privacy rights, please submit an email request to support@thescalabledev.com. We will process and respond to your request within 30 days free of charge.
9. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in our tech stack or shifts in global regulatory laws. When we update this document, we will update the "Last Updated" date at the very top of this page.