Privacy Policy
This policy explains what personal data we process in connection with your use of SolveJS, for what purpose, on what legal basis and for how long. We collect as little data as possible — only what is necessary for the service to work.
This English text is a courtesy translation. The Polish version is the legally binding one — in case of any discrepancy, the Polish wording prevails.
1. Data controller
The controller of your personal data is ABBA SOFT, ul. Arkuszowa 67, 01-934 Warsaw, Poland, VAT ID (NIP): 1181429820, REGON: 016248118, operating the SolveJS service (solvejs.com) — hereinafter the Controller.
Contact regarding data protection: via the contact form. No Data Protection Officer has been appointed — you may contact the Controller directly.
2. What data we process
We process the minimum amount of data necessary for the service to work. We do not collect your first name, surname, phone number, home address or any sensitive data. The service is entirely free of charge — we do not process payment data.
| Category | Specific data | Source |
|---|---|---|
| Account data | E-mail address, nickname, encrypted password | Provided at registration |
| Technical data | IP address (at registration/login; in a shortened/hashed form in statistics), date and time of activity | Generated automatically by the server |
| Gameplay data | Solved challenges, number of attempts, points earned, leaderboard position | Generated by your activity in the service |
Passwords are stored only in encrypted (hashed) form. The Controller has no access to your password in plain text.
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Registration and running an account | Art. 6(1)(b) — performance of a contract |
| Transactional and security e-mails (account activation, password reset, e-mail change confirmation) | Art. 6(1)(b) — performance of a contract |
| Saving progress, points and leaderboard position | Art. 6(1)(b) — performance of a contract |
| Security and protection against abuse (logs, rate limiting, anti-spam verification) | Art. 6(1)(f) — legitimate interest |
| Handling messages from the contact form | Art. 6(1)(b) or (f) |
The Controller does not carry out direct marketing and does not send newsletters. E-mails are strictly transactional, technical or security-related.
4. How long we keep data
- Account data (e-mail, nickname, password) — for as long as the account exists, and after deletion for up to 30 days (backups), then permanently erased.
- Gameplay data (results, progress, points) — for as long as the account exists.
- Security logs (IP) — a maximum of 30 days.
- Contact form messages — for as long as needed to handle the matter, no longer than 12 months.
5. Who we share data with
We share data only with entities necessary for the service to operate:
- Hosting provider — the company whose servers run the service. Data is stored on servers in Poland or within the EU.
- Cloudflare Turnstile — anti-spam verification of forms (registration, login, contact). Technical browser and device data needed for bot detection may be processed.
The Controller does not sell data and does not share it with advertising companies. As a rule, data is processed within the European Economic Area.
6. Your rights
Under the GDPR you have the right to:
- access your data,
- rectification (you can change your nickname and e-mail yourself in the Panel),
- erasure of your account and related data,
- restriction of processing,
- data portability (on request),
- object to processing based on legitimate interest.
Please send requests through the contact form — we respond within 30 days. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
7. Cookies and browser storage
The service uses essential cookies and similar technologies only. We do not use marketing, tracking or analytics cookies, and we do not embed third-party trackers.
- Session cookie (
solvejs_session) — required to keep you logged in and to protect forms (CSRF). Removed on logout / when the browser closes. - Language preference (
lang) — saved only once you choose a language yourself (PL/EN). - Local interface settings (localStorage, e.g. „hide completed”, cookie notice acknowledgement) — these never leave your browser.
- Cloudflare Turnstile — anti-spam mechanism on selected forms.
Because we use only technologies essential for providing the service and for its security, their use does not require separate consent.
8. Data security
- encrypted HTTPS connection (SSL/TLS),
- passwords stored only as hashes (the
password_hashfunction), - form protection against CSRF and bots (honeypot, Turnstile),
- request rate limiting and protection against brute-force attacks,
- the database is reachable only from the application server, with no public access.
9. Age of users
The service is publicly available and intended for learning programming. People under 16 should use the service and create an account with the consent of a parent or guardian, in line with the GDPR provisions on the age of consent.
10. Changes to this policy
We will give at least 14 days' notice of material changes by e-mail or through a message in the service. The current version is always available on the Privacy Policy page.
11. Contact
For privacy matters, write to us via the contact form. Supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.