Privacy Policy

What DiffDojo collects

DiffDojo collects only the information needed to run the training product:

• When you sign in with Google OAuth, we store your Google account email, display name, avatar URL, and stable Google account ID.
• When you are signed in and submit a review, we store your review attempt results, including the challenge, category, pass/fail result, verdict correctness, issue counts, and timestamp.
• When you are not signed in, we may store PII-free usage counters such as anonymous review submissions and product funnel events. These event rows are not tied to an account or email.
• If you send feedback, we store the message, the optional reply email you type, and your user ID if you are signed in.
• If you join a waitlist, we store your email address, the waitlist kind, and your user ID if you are signed in.

Cookies and sessions

DiffDojo uses a session cookie named session. It contains a signed JWT, expires after 7 days, and is set with HttpOnly and SameSite=Lax. In production it is also marked Secure.

Service providers

Google provides OAuth sign-in. DiffDojo may send review submissions and challenge context to Anthropic to grade a review. We do not use third-party analytics, advertising trackers, or ad networks.

How data is used

We use the data above to authenticate accounts, show progress, grade review attempts, understand product usage, reply to feedback, and maintain waitlists. We do not sell personal data.

Deletion

To request deletion of your account data, feedback, or waitlist email, contact [email protected]. We may need enough information to verify which records belong to you.