LegalPrivacy Policy

Privacy Policy

Last updated: October 22, 2026

01Information We Collect

When you create an account, we collect your email address and a username you choose. Your name and website are optional, and we keep them only if you give them. If you sign in with Google or GitHub, we receive your email address, your name and your profile picture from that account, and nothing else. We do not collect phone numbers or payment information (the service is free).

We also collect standard server logs including IP addresses, browser type, and pages visited. These are used solely for security monitoring and to diagnose technical issues.

02How We Use Your Information

  • To create and manage your account
  • To send transactional emails (password resets, account confirmation)
  • To display your public contributor profile and rank
  • To improve the quality and performance of our platform

We do not sell, rent, or share your personal data with third parties for marketing purposes.

03Data Storage

Your account data is stored in a private database on our server. We apply industry-standard security practices including encrypted connections (TLS) and hashed passwords. We do not store passwords in plain text.

04Third-Party Services

We use the following third-party services that may process limited data:

Amazon Web Services

hosts our server and database, in Sydney, Australia.

Cloudflare

carries every request to the site and blocks attacks along the way. It also counts page views without cookies. Like any network a page passes through, it sees your IP address.

Google Analytics

counts visits and the pages people read, only if you accept analytics cookies. It never receives your account details.

Google and GitHub sign-in

only if you choose to sign in with one of them. They tell us who you are; we never see your password there.

Hostinger

sends our account emails, such as email confirmation and password resets.

05Cookies

We use three cookies of our own: two the site needs to work, and one that remembers light or dark mode. Google Analytics cookies are set only if you say yes. We do not use advertising cookies.

token
Keeps you signed in. It cannot be read by scripts on the page.
Always on, the site needs it · Kept 7 days
lv_oauth
Used for a few minutes while you sign in with Google or GitHub, to check that the reply really came from them.
Always on, the site needs it · Kept 10 minutes
theme
Remembers whether you picked light or dark mode, so pages open the way you left them. It holds only the word light or dark.
Always on, a display setting · Kept 1 year
_ga, _ga_<id>
Google Analytics. Tells one visit from another so we can count readers and see which pages get read.
Only if you accept · Kept up to 2 years

You can change your answer at any time with Cookies at the bottom of every page. Saying no removes the analytics cookies that are already there.

Your cookie answer stays in your browser, on your own device, and is never sent to us.

06Your Rights

You have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data

To exercise any of these rights, email us at hello@serpcrest.com and we will respond within 7 business days.

07Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove all personal information within 30 days.

08Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via a notice on the platform. Your continued use of the service constitutes acceptance of the updated policy.

09Contact

For any questions about this privacy policy, contact us at hello@serpcrest.com.