Privacy policy

Scope

This policy explains how LeetArena handles personal information when you visit the site, create or use an account, run production-incident simulations, appear in rankings, or interact with administrative and support functions.

Third-party sign-in providers and websites have their own privacy practices. Their policies apply when you use their services.

Data we collect

We collect information you provide, information generated as you use the arena, and limited technical information needed to operate and understand the service.

• Account data: email address, username, optional country, sign-in method, account role and status, and account timestamps.
• Simulation data: scenarios started, attempt numbers, messages and commands sent to Leeta, simulated actions and discovered artifacts, milestone completion, timing, status, and scores.
• Authentication data: session identifiers, magic-link records, and identifiers returned by Google or GitHub when you choose those sign-in methods. We do not receive your third-party password.
• Technical and usage data: IP-derived and device information, browser type, pages viewed, request and event timestamps, referring pages, and similar diagnostics or analytics data.

How we use data

We use this information to authenticate you, maintain sessions, run simulations, preserve attempt history, calculate deterministic scores and progression, publish leaderboards, administer accounts and scenario content, prevent abuse, troubleshoot failures, and improve LeetArena.

We may also use aggregate or de-identified information to understand product performance and usage patterns. We do not sell personal information.

AI processing in simulations

Leeta is an AI-driven simulation assistant. When you send a message during an attempt, relevant scenario context, your message, prior simulation context, and technical instructions may be sent to an Azure-hosted AI model so the service can generate a response and update the simulated incident.

Public and administrative visibility

Your username, optional country, aggregate score, solved and failed scenario counts, rank, and related competitive results may be visible on public profiles and leaderboards. Your email address and simulation conversations are not part of the public leaderboard.

Authorized LeetArena administrators can access account, attempt, score, and operational information when needed to manage users, investigate integrity or support issues, recalculate results, and operate the platform.

Service providers and disclosures

We rely on vendors that help provide database hosting, infrastructure, email delivery, Google and GitHub authentication, AI processing, and analytics. Production pages currently use Cloudflare Web Analytics and PostHog. These providers process data on our behalf or under their own applicable terms.

We may disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud or security issues, or support a merger, financing, acquisition, or transfer of the service. Data may be processed in countries other than your own.

Cookies and sessions

LeetArena uses a session cookie to keep you signed in and protect authenticated areas. The current session lifetime is up to seven days. Production analytics providers may use cookies, local storage, or similar technologies to measure usage and maintain analytics identifiers.

You can restrict cookies through your browser, but blocking the session cookie will prevent authenticated parts of LeetArena from working.

Retention

We retain account records and simulation history for as long as needed to provide progression, rankings, integrity checks, and platform administration. Session and authentication records may expire sooner. We may keep limited records after deactivation where required for security, dispute resolution, legal obligations, or accurate historical results.

Retention periods may vary by data type, operational need, and applicable law. De-identified or aggregated information may be retained longer.

Your choices and rights

You can choose whether to provide an optional username and country, control cookies in your browser, and stop using the service. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or objection regarding your personal information.

Requests can be made through any account or contact channel LeetArena makes available. We may need to verify your identity before completing a request, and some information may be retained where law or legitimate platform needs permit.

Security

We use reasonable technical and organizational safeguards designed to protect information, including authenticated access controls and server-side authorization boundaries. No internet service or storage system is completely secure, so we cannot guarantee absolute security.

You are responsible for protecting access to your email account and third-party sign-in accounts, which may be used to access LeetArena.

Children

LeetArena is designed for software engineers and is not directed to children under 13. If you are below the minimum age required to consent to online services in your country, do not create an account without authorization from a parent or legal guardian.

Policy changes

We may update this policy as LeetArena, our providers, or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we handle personal information, we will provide additional notice when appropriate.