Privacy Policy

1. What we store when you have an account

Accounts are handled by Firebase Authentication and our database is Cloud Firestore, both run by Google. Your records are private to your account.

• Account details: your email address, a user ID, the sign-in method you used (email, Google or GitHub), the display name that provider shares with us, if any, and when the account was created and last signed in to.
• Learning progress: which problems you have solved, with the language and time of each solve; which lessons you have completed and when; and, for each pattern, the spaced-repetition schedule (when you last reviewed it, when it is next due, and how well you are remembering it).
• Streak: your current and longest streak, the last day you were active, your streak freezes, and your timezone (for example “Asia/Kolkata”), read from your browser so that days roll over at your midnight.

We don’t store the code you write. A solve records that you solved a problem, not your solution.

2. What stays on your device

• Code drafts are saved in your browser’s local storage, one per problem and language, so a reload doesn’t lose your work. They never reach our servers, stay on that browser only, and are not removed when you delete your account. Clearing your browser data removes them.
• Your light or dark theme is saved the same way.

3. Cookies

We set two cookies, both strictly necessary, and no advertising or analytics cookies:

• __session keeps you signed in, for up to 14 days.
• mn-tz remembers which timezone we last saved for you, so we don’t rewrite it on every page load. It also lasts up to 14 days.

4. When your code leaves your browser

• Python and JavaScript run entirely in your browser. To run Python, your browser downloads the Pyodide runtime from the jsDelivr CDN; some package lessons also download packages from PyPI. Those services see your IP address, as with any file your browser downloads, but not your code.
• Java, C++ and Go are compiled and run by Wandbox (wandbox.org), a free public online compiler run by an independent third party. Your code and the test inputs are sent there from your browser, so Wandbox also sees your IP address. No account information is sent. Treat anything you run there as public.
• The AI mentor (hints, chat and complexity analysis) and the system design review send your request to OpenRouter, which passes it to an AI model. The request goes from our server, not your browser, and contains:
  • the problem’s title and statement, and the pattern it belongs to;
  • your current code and its language;
  • the hint level you asked for and your recent messages in that conversation;
  • for a system design review, the components you placed, their names, and how they are connected.
  It never contains your email, name, user ID or IP address. We don’t keep these conversations.

The AI models we use are free models. The companies that run them may log what they receive and use it to improve their models. Don’t put passwords, API keys, or your employer’s confidential code into the editor or the chat.

5. Payments

Voluntary contributions on the Support page are processed by Razorpay. You enter your card, UPI or bank details on Razorpay’s own checkout, and we never see or store them. We send Razorpay the amount, and your email address if you’re signed in. We don’t keep a record of contributions in our database. Razorpay keeps the transaction records it is required to keep by law, under its own privacy policy.

6. Where your data is kept, and for how long

Your account and progress are stored on Google’s servers, which may be outside India. We keep them for as long as you have an account. Our hosting provider keeps standard request logs (IP address, the pages requested, and when) for a limited period for security and debugging.

7. Your rights

You can do the following yourself in Settings, under “Your data” and “Danger zone”:

• Export everything we store about you, as a JSON file.
• Delete your account. This immediately and permanently removes your progress, streak and account record from our database. It can’t be undone.

To correct something, ask a question about your data, or raise a complaint, including under India’s Digital Personal Data Protection Act, 2023, write to support@mentornode.in. We will reply within 30 days.

8. Children

MentorNode is meant for people aged 18 or over. If you are under 18, use it only with the consent of a parent or guardian. If you believe a child has created an account without that consent, write to us and we will delete it.

9. Changes to this policy

If we change what we collect or who receives it, we will update this page and its date. If the change is significant, we will also tell signed-in users in the app before it takes effect.

10. Contact

Questions about privacy: support@mentornode.in. Our postal address and the other ways to reach us are on the Contact page.