Privacy Policy

Last updated: February 16, 2026

1. Introduction

System Design Trainer ("SDT", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform at highloadapp.com and console.highloadapp.com.

2. Information We Collect

Information from OAuth providers: When you sign in via Google, GitHub, or Telegram, we receive your name, email address, and profile picture as provided by the OAuth provider. We do not receive or store your password.

Onboarding questionnaire: When you complete the onboarding form, we collect the answers you provide (such as your experience level and learning goals).

Usage data: We collect anonymous analytics data about page visits using GoatCounter, a privacy-friendly analytics service that does not use cookies or track personal data.

Code submissions: When you submit code for challenges, we process it to evaluate your solution. Submissions are associated with your account.

3. How We Use Your Information

We use your information to:

Create and manage your account
Provide access to challenges and track your progress
Manage your waitlist position
Send you a single notification email when your waitlist invitation is ready
Respond to your support requests
Improve the Service based on aggregated, anonymized usage patterns

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, except:

When required by law or legal process
With service providers who help us operate the platform (hosting, email delivery), under strict data processing agreements

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on secure infrastructure. We use encryption in transit (HTTPS/TLS) and follow security best practices. Access to user data is limited to authorized personnel only.

6. Cookies

We use a single essential cookie (auth_token) for authentication. This is an httpOnly cookie containing your session token. We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Withdraw consent for data processing

To exercise these rights, contact us at rusinikit@gmail.com.

8. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymous, aggregated analytics data may be retained indefinitely.

9. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

11. Contact

For questions or concerns about this Privacy Policy, contact us at rusinikit@gmail.com.