🍪 TechCookies
HomeDSASystem DesignMy Progress
Free
Log inStart free
TechCookies — Practice · Learn · PrepareTechCookies — Practice · Learn · Prepare
ConceptsPracticeSD challengesPricingPrivacyTermsContact
© 2026 TechCookies

Privacy Policy

Last updated: May 2025

Who we are

Techcookies (techcookies.com) is an interview preparation platform for software engineers. We are the data controller for the personal data described in this policy. You can reach us at privacy@techcookies.com.

What data we collect and why

Account information

When you sign in with Google or GitHub we receive your name, email address, and profile picture from that provider. We use this to create and identify your account, personalise your experience, and send you transactional emails (e.g. onboarding, Pro access approval).

Usage and progress data

We store the answers, diagrams, scores, and time you spend on practice sessions so you can resume work and track your improvement over time. This data is held in Google Firestore under your account UID.

Analytics cookies (optional — requires your consent)

If you click Accept cookies in the banner at the bottom of the page, we load Google Analytics 4 (GA4). GA4 sets cookies and collects:

  • Pages you visit and how long you spend on them
  • Core Web Vitals (page load performance metrics)
  • An opaque user identifier (your Firebase account UID — a random string, not your email) so sessions across devices can be linked
  • Approximate country/city (no precise geolocation)

If you click Decline, no analytics cookies are set and GA4 is never loaded. You can change your choice at any time by clearing the “tc_cookie_consent” key from your browser’s local storage. Your consent is remembered for 6 months and then re-asked.

GA4 is operated by Google LLC. Google’s privacy policy: policies.google.com/privacy.

Error monitoring (Sentry)

We use Sentry to capture unhandled errors and performance issues in the application. When an error occurs, Sentry may collect a stack trace, the URL where the error happened, and browser/device type. Sentry does not receive your name or email. Error data is retained for 90 days.

Sentry’s privacy policy: sentry.io/privacy.

Email communications (Resend)

Transactional emails (welcome, Pro access notifications) are sent via Resend. We pass your email address to Resend solely for delivery. We do not send marketing emails without explicit opt-in.

Third-party data processors

We share data with the following processors, each under their own privacy policy:

ProcessorPurposeData shared
Google FirebaseAuthentication, databaseEmail, name, photo URL, usage data
Google Analytics 4Usage analytics (consent-gated)Page views, events, account UID
SentryError monitoringStack traces, URL, browser type
ResendTransactional emailEmail address
NetlifyHosting and edge functionsIP address (standard server logs)
Anthropic / OpenAIAI-powered answer evaluationYour practice answer text

Your rights (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your account and all associated data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection / restriction — object to or restrict processing in certain circumstances.
  • Withdraw consent — withdraw analytics consent at any time (see the Cookies section above).

To exercise any of these rights, email privacy@techcookies.com. We will respond within 30 days.

Data retention

  • Account and usage data — retained while your account is active.
  • Deleted accounts — data removed within 30 days of deletion request.
  • Sentry error logs — 90 days.
  • GA4 data — governed by Google’s retention settings (default 14 months).

Data security

Data is stored in Google Firestore with role-based access controls. All data in transit is encrypted with TLS. Admin operations require server-side Firebase Admin SDK authentication. We do not store passwords — authentication is delegated to Google or GitHub OAuth.

Children

Techcookies is intended for adults (18+). We do not knowingly collect data from children under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to registered users. The “Last updated” date at the top of this page always reflects the current version.

Contact

Questions or requests: privacy@techcookies.com