Privacy Policy

1. Who is responsible

Skill Maps operates the Service at skillmaps.dev. For privacy requests, use the contact form on the site. We will respond within a reasonable time.

If we appoint a formal data protection contact or legal entity details change, we will update this page.

2. Data we collect

Account data: email address; password hash (we do not store plaintext passwords); optional WebAuthn / passkey credential data; account creation date.

Profile and learning data: display name, avatar URL if provided, language preference, karma and streak, last login, subscription tier, lesson progress, quiz scores, and reminder preferences.

Billing identifiers: Stripe customer and subscription IDs linked to your account. Card numbers and full payment details are processed by Stripe — we do not store full card data on our servers.

Communications: name, email, subject, and message when you submit the contact form.

Push notifications (if you enable them): browser push subscription endpoint and keys, plus reminder time settings.

Technical data: session cookie needed to keep you logged in; standard server and hosting logs (such as IP address, user agent, and request metadata) that our infrastructure providers may process.

3. How we use your data

We use personal data to create and secure your account, deliver courses and progress tracking, process Pro subscriptions, send transactional emails (welcome, password recovery), respond to support messages, and send learning reminders you opt into.

We may also use data to prevent abuse, enforce our Terms, comply with law, and improve the Service (for example understanding feature usage in aggregate where available).

We do not sell your personal information.

4. Legal bases (EEA/UK and similar)

Where GDPR or similar laws apply, we process data based on: performance of a contract (providing the Service and subscriptions); consent (for optional push reminders and similar optional features); legitimate interests (security, fraud prevention, product improvement, responding to inquiries); and legal obligations when required.

You may withdraw consent for optional processing at any time (for example by disabling reminders or unsubscribing from optional emails) without affecting processing that relies on other bases.

5. Who we share data with

We share data with service providers that help us run Skill Maps, including: hosting and serverless infrastructure (Netlify), database hosting for account and progress data, payment processing (Stripe), email delivery (Resend), and push notification delivery when reminders are enabled.

These providers process data on our behalf or as independent controllers for their payment/email systems, under their own terms and privacy policies. We may also disclose information if required by law or to protect the rights, safety, and security of Skill Maps and our users.

Administrators of Skill Maps may access account and contact-message data solely to operate and support the Service.

6. Cookies and similar technologies

We use a session cookie (or equivalent) that is necessary to authenticate you and keep you signed in. This is essential for the Service to function.

We do not currently use third-party advertising or analytics cookies on the site. If we add analytics or marketing trackers in the future, we will update this Policy and, where required, ask for consent.

7. Retention

We keep account, profile, and progress data for as long as your account remains active. Contact messages are retained as long as needed to handle your request and for reasonable business records.

Billing-related identifiers and records may be kept longer where needed for accounting, dispute resolution, or legal requirements. After account deletion or when data is no longer needed, we delete or anonymize it within a reasonable period, subject to backups and legal holds.

8. Security

We use industry-standard measures appropriate to our size and risk profile, including hashed passwords, encrypted transport (HTTPS), and access controls for administrative functions.

No method of transmission or storage is completely secure. Please use a strong unique password and protect your devices and passkeys.

9. International transfers

Our providers may process data in countries other than your own (for example in the EU or the United States). Where required, we rely on appropriate safeguards such as the provider’s contractual commitments or other lawful transfer mechanisms.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data; restrict or object to certain processing; and withdraw consent for optional processing.

To exercise these rights, contact us via the contact form. You may also update some profile information in your account settings. If you are in the EEA/UK, you may lodge a complaint with your local data protection authority.

We may need to verify your identity before fulfilling certain requests.

11. Children

The Service is not directed to children under 16 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated through the Service or by email when appropriate. Continued use after the update means you acknowledge the revised Policy.

13. Related documents

Use of Skill Maps is also governed by our Terms of Service. Together, those Terms and this Privacy Policy describe your relationship with the Service regarding rules of use and personal data.