Last updated: 2026-05-01
This Privacy Policy describes how TorchedUp, operated by Tyzo Studio ("we", "us", "our"), collects, uses, and shares information when you use our website and services (the "Service"). We strive to comply with applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to the extent they apply to you.
Account information. When you sign in with Google OAuth, we receive your email address and your Google profile photo URL. We do not receive your Google password.
Usage information. We record information about your activity on the Service, including problems viewed, problems solved, code submissions, run results, and timestamps, in order to track your progress and operate the Service.
Technical information. We may collect your IP address (for rate limiting and abuse prevention) and, when an error occurs, basic browser and operating system information through Sentry. We do not intend for error reports to contain personal data, although they may include your user ID.
Cookies and local storage. We use a small number of essential cookies and browser local-storage entries (see Section 7).
Payment information. Payments are processed by Stripe. Stripe collects and stores your payment information; we never see or store full credit card numbers. We receive only limited information such as the last four digits, card brand, and subscription status.
We use the information we collect to: operate, maintain, and improve the Service; authenticate users and protect accounts; prevent abuse and enforce our Terms; provide customer support; send transactional emails (such as receipts and security alerts); and analyze aggregate usage to make product decisions.
Aggregate acceptance rates. When you submit a solution, we record submission metadata (problem slug, pass/fail status, executor, runtime in milliseconds, and your user ID if signed in) so we can compute aggregate acceptance rates shown on the problem list.
Code drafts and submissions. We store your latest code draft per problem (per language: NumPy / PyTorch) so you can resume work across devices. We also store submission snapshots — your code at the moment you click Run or Submit — so you can review your past attempts. Drafts and submissions are visible only to you (Row Level Security). When you delete your account (Settings → Delete account), all drafts and submission history are permanently removed within 24 hours.
We do not sell your personal information. We share information with the following categories of subprocessors strictly to operate the Service:
We may also disclose information if required by law, in response to valid legal process, or to protect the rights, property, or safety of TorchedUp, our users, or the public.
We retain account and usage data while your account is active. If you request deletion, we will remove your personal data within thirty (30) days, except where we are required to retain it for legitimate business or legal reasons (such as tax records associated with prior payments).
Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal information, and to withdraw consent where we rely on it. EU/UK residents have these rights under the GDPR; California residents have similar rights under the CCPA. To exercise any of these rights, email us at support@torchedup.dev from the address associated with your account. We will respond within the timeframe required by applicable law.
You can permanently delete your account, code drafts, submission history, and waitlist signups at any time via Settings → Delete account. This is processed immediately and cannot be reversed.
TorchedUp uses only essential cookies and local-storage entries necessary to operate the Service. These include: an authentication session cookie set by Supabase; a mock-mode flag and code-run rate-limit counter stored in your browser; and a cookie consent flag (mleleet_cookie_consent) recording that you have seen the consent banner. We do not use third-party advertising or behavioral tracking cookies. Because these cookies are strictly necessary or rely on a legitimate-interest basis under the GDPR, we present a single Accept consent banner rather than granular opt-in categories.
The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
TorchedUp is operated from the United States, and our subprocessors may process data in the U.S. and other regions. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in jurisdictions whose data protection laws differ from those in your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, where appropriate, notify users by email or in-app notice. Continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.
Privacy questions or requests can be sent to support@torchedup.dev.