Privacy Policy

1. Introduction

Welcome to System Design Sandbox ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website systemdesignsandbox.com and use our services.

2. Information We Collect

2.1 Personal Information

• Email address (when you sign up or contact us)
• Account credentials (encrypted)
• Profile information (name, if provided)

2.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Operating system

2.3 Usage Data

• Practice session data (designs created, scores, completion status)
• Feature usage and interaction patterns
• Performance data and error reports

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our service
• Authenticating users and managing accounts
• Personalizing your learning experience
• Analyzing usage patterns to improve our platform
• Sending administrative information and updates
• Detecting and preventing fraud or abuse
• Complying with legal obligations

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service. We use:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: PostHog analytics to understand how you use our platform
• Performance Cookies: Vercel Analytics for performance monitoring

See our Cookie Policy for more details.

5. Third-Party Services

We use the following third-party services:

• Clerk: Authentication and user management
• PostHog: Product analytics and session recording
• Vercel: Hosting and analytics

These services may collect information as governed by their respective privacy policies.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With service providers who assist in operating our platform
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property
• In connection with a merger, sale, or acquisition (with notice to you)

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Your Data Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information in the Contact section.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

9.1 Categories of Personal Information We Collect

• Identifiers: Email address, IP address, device identifiers
• Internet Activity: Browsing history on our site, pages visited, interaction with our service
• Geolocation Data: Approximate location based on IP address
• Professional Information: System design practice data, session results, scores

9.2 How We Use Personal Information

We use the categories of personal information listed above for the following business purposes:

• Operating and improving our service
• Personalizing your experience
• Analytics and performance monitoring
• Communicating with you about our service
• Security and fraud prevention

9.3 Your California Privacy Rights

California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of the sale of personal information (Note: We do not sell personal information)
• Non-Discrimination: Not be discriminated against for exercising your CCPA rights

9.4 We Do Not Sell Your Personal Information

We do not sell, rent, or share your personal information with third parties for their direct marketing purposes. We do not sell personal information of minors under 16 years of age.

9.5 How to Exercise Your Rights

To exercise your CCPA rights, please contact us at privacy@systemdesignsandbox.com with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and respond within 45 days.

9.6 Authorized Agent

You may designate an authorized agent to make a request on your behalf. We will require written proof that the agent is authorized to act on your behalf.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 30 days.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@systemdesignsandbox.com