Privacy Policy

DevPrep ("we," "us," or "our") operates the website at https://devprep.co (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address, username, and optional profile details (bio, avatar).
• User Content: Comments, bookmarks, and interactions (likes/dislikes) you submit on the platform.
• Feedback: Any feedback or messages you submit through the feedback widget.

1.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, scroll depth, clicks, and navigation patterns.
• Device Information: Browser type, operating system, and screen resolution.
• Anonymous Visitor ID: A randomly generated identifier stored in your browser's local storage to recognize returning visitors. This is not linked to your real identity unless you create an account.
• IP Address & Location: Your approximate geographic location (city, country) derived from your IP address for analytics purposes.
• Cookies & Local Storage: We use essential cookies for authentication sessions and local storage for theme preference and visitor identification.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To personalize your experience (bookmarks, dashboard, streaks).
• To analyze usage patterns and improve content quality and site performance.
• To detect and prevent abuse, bots, and spam.
• To communicate with you about your account or respond to feedback.
• To comply with legal obligations.

3. Third-Party Services

We use the following third-party services that may collect information:

• Supabase: Database and authentication provider. Your account data is stored securely in Supabase with Row Level Security (RLS) policies.
• Vercel: Hosting and analytics. Vercel Analytics and Speed Insights collect anonymized performance metrics (Core Web Vitals) per route.
• Google AdSense: We use Google AdSense to display advertisements. Google may use cookies and web beacons to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising by visiting Google Ads Settings. For more information, see Google's advertising policies.

4. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication and session management. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use the site (page views, time on page, scroll depth). Data is collected via our first-party analytics system.
• Advertising Cookies: Third-party cookies set by Google AdSense to serve relevant advertisements. These may track your browsing activity across other websites that use Google's advertising network.

You can control cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Service.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share data in the following limited circumstances:

• Service Providers: With trusted third-party services (Supabase, Vercel, Google) that process data on our behalf.
• Legal Compliance: When required by law, subpoena, or to protect our rights and safety.
• Aggregated Data: We may share anonymized, aggregated statistics that cannot identify individual users.

6. Data Retention

We retain your account data for as long as your account is active. Analytics data (page views, events) is retained for up to 24 months for trend analysis. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, Row Level Security (RLS) on all database tables, and server-side input validation with Zod schemas. However, no method of electronic transmission or storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of personalized advertising.
• Export your data in a portable format.

To exercise any of these rights, contact us at privacy@devprep.co.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@devprep.co.