Privacy Policy

1. Who we are

Mazaalai IO is operated by Mazaalai Technologies. This Privacy Policy explains what information we collect when you use the service at mazaalai.io, why we collect it, and the choices you have. Questions go to hello@mazaalai.io.

2. Information we collect

Account information you provide at signup: email address, first name, and last name. We hash and store a password you choose — we never see the plaintext after you submit it.

Submission data you generate by using the service: code you submit, the language you chose, the verdict (Accepted, Wrong Answer, etc.), runtime, and memory usage. This data is tied to your account so you can see your progress.

Technical data captured automatically in server logs: your IP address, user agent, and timestamps for requests. We use this for security and debugging.

Local-storage state kept on your device, not on our servers: your current track, problem, language, and draft code in the terminal. This stays in your browser and is removed when you log out.

3. How we use your information

To deliver and grade your submissions, to restore your session when you return, to enforce rate limits and prevent abuse, to send transactional messages (such as a password reset email when that feature ships), and to understand how the product is used so we can improve it. We do not use your data to train external AI systems.

4. Cookies and local storage

We use one essential, HttpOnly authentication cookie to keep you signed in. The cookie holds a signed JSON Web Token (JWT) and is not readable from JavaScript.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. The browser local-storage entry described in section 2 is functional, not tracking.

5. How we share information

We do not sell or rent your personal information. We share it only with service providers that we need in order to run the service — for example, cloud hosting and (in the future) a sandboxed code-execution provider that runs your submissions — each bound by confidentiality. We may disclose information when required by law or to protect the safety of users and the service.

6. Data retention

We keep your account and submission history for as long as your account is active so you can pick up where you left off. When you delete your account, we remove or anonymize associated personal data within 30 days, except where we are legally required to keep it longer.

7. Your choices and rights

You can access, correct, export, or delete your data by emailing hello@mazaalai.io. We will respond within the time required by applicable law.

California residents have rights under the CCPA / CPRA, including the right to know what we collect, to delete it, and to opt out of any sale of personal information. We do not sell personal information.

EU, UK, and Swiss residents may exercise rights under the GDPR and equivalent local laws, including access, rectification, erasure, restriction, portability, and objection. Our lawful bases are typically contract (delivering the service you signed up for) and legitimate interests (security and product improvement).

8. Security

All traffic is served over HTTPS. Authentication tokens are stored in HttpOnly cookies so they cannot be read by scripts. Passwords are stored using PBKDF2 with a per-user salt. We rate-limit submissions and other sensitive endpoints. No system is perfectly secure; if you believe you have found a vulnerability, please email hello@mazaalai.io.

9. Children's privacy

Mazaalai IO is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, please contact us and we will remove it.

10. International users

The service is operated from the United States. By using it from outside the U.S., you consent to your information being transferred to and processed in the U.S., where data-protection laws may differ from those of your country.

11. Changes to this policy

We will update this page when our practices change. If the change is material, we will also notify you by email before it takes effect.

12. Contact us

Questions, requests, or complaints about this policy: hello@mazaalai.io.