Design Round

Privacy Policy

Last updated: May 5, 2026

1. Information We Collect

Account information: When you sign in via GitHub or Google, we receive your name, email address, and profile picture from the OAuth provider. If you subscribe to a paid plan, we also store a Stripe customer ID and your subscription status. We do not store your OAuth password.

Interview session data: We store the messages exchanged during your interview sessions, whiteboard exports you share, session settings (mode, duration), and AI-generated evaluations.

Usage data: We track credit consumption and session metadata (start time, duration, scenario) to provide the Service and display your history.

Technical data: We log IP addresses, user agents, and request timestamps to operate the Service, prevent abuse, and apply rate limits.

Marketing data: If you join our waitlist or newsletter, we store your email address in our database and in MailerLite (our email service provider) so we can contact you. You can unsubscribe at any time.

Course buyer data: If you have purchased a course on advancedfrontendcourse.com, we receive your name, email address, and purchase date from that platform to grant you complimentary access to the Service.

2. How We Use Your Information

  • To provide, operate, and improve the Service
  • To process credits and billing
  • To display your session history and evaluations
  • To send transactional emails (account, billing)
  • To detect and prevent fraud or abuse

We do not sell your personal information to third parties. We do not use your interview sessions to train AI models without your explicit consent.

3. AI Processing

Your messages are sent to Anthropic to generate AI responses. We store the full transcripts of your sessions so you can review them later in your dashboard; the same transcripts are sent back to Anthropic each turn to maintain conversation context. Anthropic's privacy policy governs their handling of this data on their side.

4. Data Storage and Security

Your data is stored in MongoDB Atlas with encryption at rest and in transit. Session tokens use industry-standard authentication (Better Auth).

We retain your account data and interview sessions for as long as your account is active. Billing records are retained as required by tax law. You can request deletion at any time by contacting us; we will delete your data within 30 days unless we are required to retain it for legal reasons.

5. Third-Party Services

We use the following third-party services:

  • Anthropic: AI model processing
  • MongoDB Atlas: Database storage
  • GitHub / Google: OAuth authentication
  • Stripe: Payment processing and subscription management
  • MailerLite: Newsletter and waitlist email delivery
  • Vercel: Application hosting and scheduled jobs
  • advancedfrontendcourse.com: Course-purchase verification (operated by the same sole proprietor as this Service)

Some of these providers process data outside the European Union (notably in the United States). Where this is the case, we rely on Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.

6. Cookies

We use a session cookie (better-auth.session_token) to keep you logged in, plus a CSRF token cookie set by our authentication library. Stripe Checkout sets its own cookies on its hosted payment page, governed by Stripe's privacy policy. We do not use third-party tracking cookies or advertising cookies.

7. Your Rights

You have the right to access, correct, port, or delete your personal data, and to object to or restrict our processing of it. To exercise these rights, contact us at the address below; we will respond within 30 days. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we become aware of such collection, we will delete the data promptly.

9. Data Controller

The data controller responsible for your personal data is:

Dmitrii Zhiganov
Seestraße 39
13353 Berlin
Germany
designround@proton.me

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

For privacy questions or data requests, contact us at designround@proton.me.