01What we collect
We collect only what is needed to run your account and track your progress. Here is a plain description of everything we hold:
Your account
Your name, email address, and a securely hashed version of your password. If you sign in with Google or GitHub, we store the identifier they provide — we never see your password for those accounts. You can also add an optional profile photo.
Your progress
Your current rank, XP total, the cases you have completed and attempted, your daily activity streak, and any badges you have earned. This is the core record of your journey through the platform.
Your submissions
The code, queries, and answers you submit when working on cases. We store these to evaluate your work and to let you review your own submission history. We also store whether your submission was correct and how long it took.
Your activity log
A record of key actions on your account — things like logins, case completions, promotions, and password changes. This exists for your security and to help us investigate any issues with your account.
Your platform profile
As part of the career simulation, we assign you a fictional Praxicraft email address, employee ID, department, and manager. These are generated by the platform — they are not real and are not shared with any external system.
Technical data
Your IP address and browser type when you sign in. We use this to monitor for suspicious access and to help you if your account is compromised.
Assessment Data (Assess)
For candidates taking assessments, we collect terminal interactions, keystrokes, and timing data. This is used solely for the hiring organization to evaluate your problem-solving process.
Organization Data
For hiring teams, we store organization names, API keys (hashed), and invitation history. Billing data is handled securely via Stripe and is never stored on our direct servers.
Session data
A session cookie that keeps you logged in. It is stored on our servers — not in your browser as readable data. It expires when you sign out or after a period of inactivity.
02How we use it
We use your data to run the platform and nothing else. Specifically:
- 1To authenticate you and keep your account secure.
- 2To evaluate your case submissions and record your progress.
- 3To calculate your XP and determine when you qualify for a promotion.
- 4To send you notifications about your activity — promotions, messages from your Praxicraft manager, new cases.
- 5To display your rank on the public leaderboard, if you have opted in.
- 6To improve the quality of our cases by looking at aggregate patterns in submissions (for example, which cases have high failure rates). We do not share this at an individual level.
We do not sell your data. We do not use it for advertising. We do not share it with third parties beyond what is needed to run the service — for example, our cloud hosting provider.
03The public leaderboard
By default, your profile is private. If you choose to appear on the public leaderboard, your display name and current rank will be visible to other users. You can change this setting in your profile at any time.
04Data security
We take reasonable steps to protect your account:
- Passwords are hashed using a strong one-way algorithm. Even we cannot read them.
- All traffic between your browser and our servers is encrypted.
- Session cookies are set as HttpOnly — they cannot be read by JavaScript on the page.
- Administrators require two-factor authentication to access the platform backend.
- Unusual login activity is flagged and logged automatically.
05Your rights
You have the following rights regarding your data:
Access
Your profile, progress, and submission history are visible in your dashboard at any time.
Correction
Update your name, email, and profile details in your account settings.
Deletion
Contact us to remove your account and personal data within 30 days.
Export
Request a copy of the data we hold on you via email.
06Contact
Questions about how we handle your data can be sent to
legal@praxicraft.com