Privacy Policy
Effective 10 October 2026
This policy explains what System Design Review collects and why.
What we collect
- Account data: your name, your email address when the sign-in method provides one, and the identifier your sign-in provider gives us.
- Your work: design drafts, submissions and solved problems, so you can pick up where you left off.
- Subscription data: your plan, its status and renewal date. Payments are handled by Stripe; we never see or store your card number.
- Usage analytics (only if you allow it): product events such as opening a problem, running or submitting a design, pages visited and how long steps take. Signed-in users' events are tied to an internal user id, not your name or email. If you decline, none of this is collected.
- Technical data: basic server logs such as IP address and request time, used for security and rate limiting.
Why we may process it (legal basis)
- Contract: account, your work, subscription and sign-in emails, which we need to provide the Service.
- Legitimate interests: security logs and rate limiting.
- Consent: usage analytics. You can change your choice at any time with “Analytics settings” in the footer.
- Legal obligation: keeping payment and tax records.
How we use it
To run the Service, keep your account safe, bill you, answer support requests, and understand which parts of the product work. We do not sell your data or use it for advertising.
Who we share it with
Only service providers that run the Service for us: Google Cloud (hosting and, for Pro reviews, the Gemini model that reads your design), Neon (database), Stripe (payments), Resend (sign-in emails), PostHog (analytics, EU region, only with consent), and Google or GitHub when you choose to sign in with them. Some of these are based outside the EU; where data leaves the EU we rely on the provider's standard contractual clauses or equivalent safeguards. We may disclose data when the law requires it.
Cookies and storage
We use one session cookie to keep you signed in. Your browser also stores your theme, layout preferences, unsynced drafts and your analytics choice locally. If you allow analytics, a random identifier is kept in your browser's session storage for the visit.
Retention and deletion
We keep your data while your account exists. You can delete your account from the Account page, which cancels any subscription and permanently deletes your drafts, submissions and progress. Payment records may be kept by Stripe and by us as the law requires.
Your rights
Depending on where you live you may have rights to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent. You can download your data and delete your account on the Account page. Deleting also asks our analytics provider to erase your events. For anything else, email us and we will reply within one month. You may also complain to your local data protection authority.
Changes
We will post changes here and update the effective date.
Contact
Privacy questions: support@example.com.