Privacy Policy

1. Introduction

Prompt Arena ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at prompt-arena.dev (the "Service").

2. Information We Collect

Account Information

When you sign in via GitHub OAuth, we receive your GitHub username, email address, profile picture, and public profile information. We do not access your private repositories or code.

Usage Data

We collect information about how you interact with the Service, including battles joined, submissions, scores, session replays, and leaderboard activity.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or full payment details on our servers. Stripe may collect information necessary to process your payment in accordance with their Privacy Policy.

3. Cookies & Tracking

We use essential cookies to maintain your authentication session. We do not use third-party advertising trackers. We may use analytics tools to understand aggregate usage patterns and improve the Service.

4. How We Use Your Information

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Process transactions and send related information
• Display leaderboard rankings and battle results
• Communicate with you about updates, security alerts, and support
• Detect, prevent, and address technical issues or abuse

5. Third-Party Services

We integrate with the following third-party services, each with their own privacy policies:

• GitHub — OAuth authentication
• Stripe — Payment processing
• Vercel — Hosting and infrastructure
• Neon — Database hosting

6. Data Retention

We retain your account information and usage data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at the email below.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@prompt-arena.dev.