Privacy policy
Last updated: October 2026
BrokenCluster is a practice platform. To run it, grade your work and make it better, we collect data about how you use it. This page lists all of it, in plain language. We do not sell personal data and we do not use third-party advertising or tracking scripts.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Account: name, email, password hash or sign-in provider ID, profile picture, username | To create and secure your account | Contract |
| Profile you choose to fill in: headline, bio, country, links, time zone | Your public profile, country leaderboards, streaks in your time zone | Contract |
| Practice data: attempts, answers, grader results, time spent, solutions opened, points | Grading, points, streaks, your daily plan and weak-spot tracking | Contract |
| Your email address and a summary of your practice (solved, streak, exam readiness) | The weekly progress email, sent only while you practise; turn it off in Settings or with one click in any of them | Legitimate interest |
| Commands you run in lab terminals, with their exit status and working directory | To understand where learners get stuck, improve problems and graders, prevent abuse | Legitimate interest |
| Onboarding answers: role, experience, goals, topics, target certifications, organisation, how you heard about us, pricing opinion | To personalise your plan and decide what to build next | Consent (you can skip every question) |
| Feedback, ratings and “notify me” requests | To improve problems and prioritise new topics | Consent |
| Usage analytics: pages viewed, buttons clicked, searches, scroll depth, page performance, browser, device type, screen size, language, coarse country, referrer and campaign tags | To understand which features help and fix what does not | Consent (only if you click “Accept analytics”) |
| Billing: plan, period, amounts, payment provider reference | To manage your subscription. Card details are handled by the payment provider and never reach us. | Contract, legal obligation |
| Security logs: IP address and browser of sign-in sessions | To protect accounts and detect abuse | Legitimate interest |
Cookies
- Essential: a session cookie that keeps you signed in, and a cookie that remembers your privacy choice.
- Analytics (optional): a random visitor ID so we can count unique visitors and connect events in a visit. Set only after you accept.
You can change your choice any time with “Privacy choices” in the footer.
Lab sandboxes
Each lab runs on an isolated, temporary machine with no internet access. It is destroyed when you stop it or after a period of inactivity. Do not enter real passwords, keys or personal data into lab machines.
Who we share data with
Only service providers that run BrokenCluster for us (hosting, database, email, payments), under contracts that limit their use of the data. If you join through a university or company plan, your instructor can see your progress in that class. Your public profile and leaderboard entry are visible to everyone unless you make your profile private.
How long we keep it
Account and practice data are kept while your account exists. Analytics events are kept for up to 24 months. When you delete your account, we delete your profile, practice history, commands and analytics linked to you; billing records are kept as long as tax law requires.
Your rights
You can access, download, correct or delete your data at any time in Settings, withdraw consent for analytics, and object to processing. You can also contact us, or complain to your local data protection authority.
Contact
Questions about privacy or your data: abd.ahmed.hass@gmail.com.