Privacy Policy
Last updated: May 2026
Overview
SQLMentor ("we", "us", "our", or "Site") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site.
Information We Collect
1. Information You Provide
- No User Accounts: SQLMentor does not require user registration or account creation
- No Form Submissions: We do not collect information through forms or contact submissions
- No Personal Data: We do not collect names, email addresses, or other personally identifiable information
2. Automatically Collected Information
Vercel Analytics
We use Vercel Web Analytics to understand how visitors use our Site. This service collects:
- Page views: Which pages you visit and how long you spend on each
- Device information: Browser type, operating system, device type
- Referral source: How you arrived at our Site
- Anonymized IP address: Geographic location (country/region only)
- User interactions: Scroll depth, clicks, and other engagement metrics
Vercel Analytics does NOT track:
- Your exact IP address
- Cookie identifiers
- Cross-site tracking
- Personally identifiable information
3. Browser Storage (localStorage)
Your browser's local storage is NOT used to persist:
- Exam results or scores
- Quiz progress or answers
- Personal information
For security reasons, exam and quiz results are session-based only and are cleared when you refresh the page.
4. What We Do Store Locally
Only non-sensitive preferences are stored locally:
- Theme preference: Dark/light mode selection (key:
sqlmentor-theme)
How We Use Your Information
- Site Analytics: To understand usage patterns and improve content
- Performance Monitoring: To identify and fix technical issues
- Security: To detect and prevent abuse or malicious activity
- Content Improvement: To make data-driven decisions about new topics and features
Data Security
Security Measures
We implement multiple layers of security:
- HTTPS: All traffic is encrypted in transit (Strict-Transport-Security header)
- Content Security Policy (CSP): Prevents injection attacks and restricts script execution
- Subresource Integrity (SRI): Verifies external resources haven't been tampered with
- HTML Sanitization: User-generated content is sanitized before rendering
- Path Validation: Prevents directory traversal attacks
- MIME Type Protection: Prevents browser MIME sniffing attacks
- Clickjacking Protection: X-Frame-Options header prevents embedding in iframes
What We Don't Store
- User credentials or passwords
- Exam scores or results (session-based only)
- Quiz answers or progress
- Personal information
- Sensitive user data
Third-Party Services
Vercel Hosting & Analytics
Our Site is hosted on Vercel and uses Vercel Analytics. Their privacy practices are governed by:
CDN Resources
We load some resources from Content Delivery Networks (CDNs):
These resources are loaded with Subresource Integrity (SRI) verification to ensure they haven't been compromised.
Your Rights & Choices
Data Minimization
We collect the minimum data necessary to operate the Site. You have the right to:
- Opt out of analytics: Check your browser's Do Not Track settings
- Clear local storage: Open DevTools (F12) → Application → Local Storage → Delete
- Block cookies: Configure your browser's privacy settings
Accessing & Deleting Your Data
Since we don't collect personal information, there is no account data to access or delete. Your analytics data from Vercel can be requested according to Vercel's Data Subject Access Request (DSAR) process.
GDPR & Privacy Compliance
GDPR
For EU residents, this Privacy Policy complies with GDPR. Our lawful basis for analytics is:
- Legitimate Interest: Understanding site usage to improve services
- Anonymization: Vercel Analytics does not track identifiable individuals
CCPA (California Privacy Rights Act)
We do not sell personal information. We collect minimal data and do not store it across sessions.
Cookies Policy
SQLMentor does NOT set cookies for tracking or analytics. Vercel Analytics uses privacy-friendly methods that don't rely on cookies.
Only your browser's localStorage is used for non-sensitive preferences (theme selection).
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date above.
Your continued use of the Site following the posting of revised Privacy Policy means that you accept and agree to the changes.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us through:
Additional Resources
Security Documentation
- SRI_HASH_GUIDE.md - Subresource Integrity implementation
- SECURITY_HEADERS_GUIDE.md - HTTP security headers
- CONTENT_INTEGRITY_GUIDE.md - HTML sanitization and path validation
- CLAUDE.md - Architecture and security decisions
External Resources
SQLMentor is a free, open-source SQL learning platform. No personal data is required or collected.
SQLMentor is a free SQL learning platform. No personal data is required or collected.
SQLMentor