This privacy notice tells you about the information we collect from you when you use DojoCode, why we collect it and what we do with it.

Last Updated: 3 October 2026.

Who are we?

DojoCode is operated by DOJOCODE SRL. Our address is Tarnavei 9, ap. 21, Satu Mare, Romania. You can contact us by post at the above address, or by email at office@dojocode.io.
We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.

Whose data we are responsible for

When you use DojoCode with a personal account, DOJOCODE SRL decides how and why your personal data is used. We are the data controller.

When you use DojoCode as a student or member of a school, university or company that has an organization account, that organization decides how DojoCode is used for its classes and teams. In that case the organization is the controller of the data it manages through DojoCode, and we process that data on its behalf, under our Data Processing Agreement. If you have a question about how your school or organization uses your data, please contact it first.

The information we collect

The amount and type of information we collect depends on how you use DojoCode. We collect information only insofar as it is necessary or appropriate for the purpose of your interaction with us. You can always refuse to supply personal information, with the caveat that it may prevent you from using certain features.

• Account information. Your email address, username, password (stored in hashed form), and the profile details you choose to add, such as your name, avatar, bio, social links, experience, skills and the languages you work in.
• Sign-in through another service. If you sign in with GitHub, Google or Discord, that service sends us the basic profile information needed to create and recognise your account, such as your name, email address and avatar. We do not receive your password for that service.
• Your content. The code you write, your solutions, the challenges, learning paths, contests and hackathons you create, your projects and their files, comments, chat messages and anything else you submit.
• Your activity. Your progress, scores, points, badges, streaks, contest and hackathon results, assignments, the time spent on tasks and how many times you used the AI assistant on a task.
• AI and voice interactions. What you type or say to our AI features and the answers you receive. See "When you use our AI features" below.
• Payment information. When you buy a subscription, our payment provider collects your payment details. We receive a record of the purchase, not your full card number.
• Technical information. Information that browsers and servers typically make available, such as your IP address, browser type, language preference, referring site, and the date and time of each request.
• Messages you send us. Support requests, survey answers and other correspondence.

How we use your information

We use your information to provide DojoCode and its features, to keep accounts and the platform secure, to process payments, to answer your requests, to understand how the platform is used so that we can improve it, and to comply with the law. DojoCode does not disclose personal information other than as described in this policy, and we do not sell it.

Our legal bases for processing personal data under the GDPR include:

• Consent – where you have given us permission (e.g., newsletter subscription or analytics cookies).
• Contract – where processing is necessary to provide you with DojoCode services.
• Legitimate interests – where processing is necessary to keep the platform secure, to prevent abuse and cheating, and to understand and improve how DojoCode is used, and your rights do not override those interests.
• Legal obligation – where we must comply with the law.

When you use our website

Like most website operators, DojoCode collects non-personally-identifying information of the sort that web browsers and servers typically make available. Our purpose in collecting it is to better understand how our visitors use the website. From time to time, DojoCode may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

A visitor's IP address may be logged within our system, typically for security and debugging purposes, separate from our application databases. The IP address may remain stored within our logs for up to 3 months.

Cookies and similar technologies

When you use our website, cookies and browser storage are used by us and by third parties to allow the website to function, to remember your choices, and to collect information about how the website is used.

• Strictly necessary. We store what is needed to keep you signed in and to remember your settings and choices, including your cookie preferences. The website cannot work properly without these.
• Google Analytics. We use Google Analytics to measure how the website is used. Its measurement is switched on only if you accept analytics cookies in our Cookie Settings tool.
• Microsoft Clarity. We use Microsoft Clarity to understand how visitors interact with our pages. It uses the cookies _clck, _clsk and CLID, which keep a Clarity user ID and preferences, connect the pages you view into a single session recording, and identify the first time Clarity saw your browser. The retention period is from 30 days to 13 months.
• Mixpanel. We use Mixpanel to understand how features of the product are used, for example which pages are opened and which actions are taken. Mixpanel keeps an identifier in your browser's local storage, and the data is stored in Mixpanel's European Union data centre.

A table of the cookies used is at the end of this policy. Visitors who do not wish to have cookies placed on their computers can set their browsers to refuse cookies before using our website, with the drawback that certain features may not function properly without them.

When you purchase a subscription from our website

When you purchase a subscription, payment is handled by Stripe, our payment processor. Stripe may ask you for your name, billing address, email address and credit/debit card information, and uses them to verify your card, process the payment and manage your subscription. Your card details are passed directly to Stripe. We do not store your full card number.

We receive and keep a record of your purchase: the plan, the amount, the billing period, the status of the subscription and the billing details needed for invoicing. We will also send you a receipt by email. We require this information in order to process your payment and fulfil our contract with you.

We keep your order information for as long as we are required to for accounting and tax purposes.

When you solve or create a code challenge using our website

One of the main functions of the DojoCode platform is to create and solve coding challenges. Each time you complete a code challenge, your solution may be shown within a list of other solutions for that code challenge. Each time you publish a code challenge that you created, your challenge will be displayed within our public bank directory, with your username and profile link associated with the content.

Your profile page, your username, your badges and your position on leaderboards, contests and hackathons can be seen by other users.

We keep your user information for as long as you have a user account with us.

You may decide to delete your account at any time. A deleted account will result in the username being removed from all content, including challenges and solutions, associated with that name. In its place we will generate a non-personally identifiable name. The related profile page will be deleted.

At any point, you may request that your personally identifiable information be removed. You can do so by deleting your account from your user settings page. To submit a request regarding your personal data by email or post, please use the contact information provided above in the "Who are we?" section of this policy.

When you use our AI features

DojoCode includes AI features, such as the AI assistant that explains errors, gives hints and reviews your code, the tools that help you create challenges, contests and learning paths, voice conversations with the assistant, and AI generation of text, images and other media inside projects.

To produce an answer, we send what you ask to an AI provider, together with the context needed to answer it. Depending on the feature, that context can include the task you are working on, your code and project files, and the earlier messages of the conversation. The providers we use are Anthropic, Google, OpenAI and Replicate. They process this content to return a response to us.

For voice conversations, your microphone audio is sent to LiveKit to carry the conversation, to Deepgram to turn your speech into text, and to ElevenLabs to turn the assistant's answer into speech.

We store your conversations with the assistant in your account so that you can return to them, and we store what you generate with AI inside your projects. We also record how many times you used the AI assistant on a task. If you are a student in a group, your teacher may be able to see that number together with your solution.

Please do not include personal information about yourself or other people in what you send to the AI features, beyond what is needed for the task. We do not use AI to make decisions about you that have legal or similarly significant effects.

When you use DojoCode through a school or organization

If you join a group created by a teacher, or you are a member of an organization, the teachers and administrators of that group or organization can see your name or username, the tasks assigned to you, your solutions and projects for those tasks, your progress, scores and results, and how much you used the AI assistant. They can create reports about the group and export them. They can also decide how much AI help is available to the group.

If your school connects DojoCode to its learning management system (for example Moodle or Canvas), that system sends us the information needed to recognise you, such as your name, email address, your role and the course you came from, and DojoCode sends your grades back to it.

Plans for schools give each student access to premium features. We tell the organization which accounts are in its groups so that it can manage its seats.

Children and students under 16

DojoCode is not directed at children under 16 who use it on their own. A student under 16 may use DojoCode only through a school or organization that has obtained any consent required by law, for example from a parent or guardian. If you believe a child has given us personal data without that consent, please contact us and we will delete it.

Live collaboration and video calls

When you take part in a live collaboration session, the other participants can see your username, your cursor and the code you type in that session. When you join a video call, your audio and video are transmitted to the other participants through our Jitsi video meeting service so that the call can take place.

Some learning content includes videos hosted on Vimeo or YouTube. When you play one, the video is loaded from that service, which receives your IP address and may set its own cookies.

Projects, publishing and hosted databases

When you publish a project, it becomes available at a public address that anyone can open, and it is hosted on Cloudflare. Everything you include in a published project is public, so please do not include secrets or personal data that should stay private.

If your project uses a database that we host for you, we store the data that you or your project's visitors put into it. You are responsible for that data, including having a lawful reason to collect any personal data of other people.

When you take part in our feedback survey

When you take part in our feedback survey, we record your name, your email address, and may ask for your organization name, your job role and your answers to questions we ask about your opinion of, and use of, our products and services.

We use this information to develop and improve our product and services and our customer relationships.

Your job role, organization and some or all of your comments may be publicly displayed on our website as a testimonial. We will do this based on our legitimate interest in marketing our products and services.

We do not use the information you provide to make any automated decisions that might affect you.

Your personal data is stored for three years, or for as long as we are marketing the product or services that the review refers to, whichever is shorter. You may ask us to remove a testimonial that is based on your feedback from our website at any time.

When you request info from our education partners

When you request information about one or more of our education partners we will send your information directly to that partner, who will follow up by calling or emailing you. Your information will never be sent to a partner, or any other 3rd party, without your consent. You will always choose which partner we send information to, either by selecting them as a match, or by submitting a form directly on their partner specific page.

The information sent to partners will consist of the personal information you provide to us, as well as state and country location based on your IP. Personal information provided by you will consist of name, email, and phone number.

Emails we send you

We send you emails that are needed to run your account, such as confirmations, password resets, receipts, invitations and notifications about your groups and assignments. If you are a registered user, we may also occasionally send you an email to tell you about new features, ask for your feedback, or keep you up to date with DojoCode. You can turn notification emails off in your account settings, and you can unsubscribe from our newsletter at any time.

Who we share your information with

DojoCode discloses personal information only to those of its employees, contractors and service providers that (i) need to know that information in order to process it on our behalf or to provide services available on our website, and (ii) that have agreed not to disclose it to others. DojoCode will not share with or sell your personal information to other organizations for commercial purposes, except when we have your permission to provide you products or services that you have requested.

The service providers we use are:

• Hosting and storage: Hetzner, for our servers and databases, and Cloudflare, for file storage and for the projects you publish.
• Payments: Stripe.
• AI: Anthropic, Google, OpenAI and Replicate.
• Voice and video: LiveKit, Deepgram and ElevenLabs for voice conversations, our Jitsi video meeting service for video calls, and Vimeo and YouTube for the videos embedded in learning content.
• Analytics: Google Analytics, Microsoft Clarity and Mixpanel.
• Email: Google.
• Sign-in: GitHub, Google and Discord, only if you choose to sign in or connect your account with them.
• Scheduling: Calendly, only if you book a call with us.

We may also disclose information when we are required to do so by law, or when it is necessary to protect our rights, our users or the public.

Transfers outside the European Economic Area

Some of the service providers listed above are located, or process data, outside the European Economic Area, including in the United States. When your personal data is transferred outside the European Economic Area, we rely on a decision of the European Commission that the destination provides adequate protection, such as the EU-U.S. Data Privacy Framework, or on the standard contractual clauses approved by the European Commission.

How we protect your information

DojoCode takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of personal information. Access to personal data is limited to the people who need it to do their work. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

How long we keep your information

• Account information and your content: for as long as you have an account with us.
• Server logs that contain IP addresses: up to 3 months.
• Order and billing records: for as long as we are required to for accounting and tax purposes.
• Survey answers: three years, or for as long as we are marketing the product or service that the answers refer to, whichever is shorter.

When you delete your account, your profile is deleted and your username is removed from your content. The challenges you published and the solutions you submitted stay on the site under a non-personally identifiable name.

Your rights as a data subject

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate. If we have asked for your consent to process your personal data, you may withdraw that consent at any time. If we are processing your personal data for reasons of consent or to fulfil a contract, you can ask us to give you a copy of the information in a machine-readable format so that you can transfer it to another provider.

If we are processing your personal data for reasons of consent or legitimate interest, you can delete your data by logging into your account, going to settings, scrolling to the bottom of the page, and clicking "Delete Account". The challenges that you create as a user of DojoCode will be kept on the site, even if you delete the account.

You have the right to object to processing that is based on our legitimate interests, and to ask us to stop using your information for a period of time if you believe we are not doing so lawfully.

Finally, in some circumstances you can ask us not to reach decisions affecting you using automated processing or profiling.

To submit a request regarding your personal data by email or post, please use the contact information provided above in the "Who are we?" section of this policy. If your account is managed by a school or organization, we may pass your request to it.

We will respond to all valid requests to exercise your rights within 30 days, or within 90 days if the request is complex. We may require you to verify your identity before we can process your request.

You also have the right to lodge a complaint with a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Updates to this policy

We regularly review and, if appropriate, update this privacy policy from time to time, and as our services and use of personal data evolve. If we want to make use of your personal data in a way that we haven’t previously identified, we will contact you to provide information about this and, if necessary, to ask for your consent.

Cookies we use

Cookie	Name	Purpose	Type	Expiration	Details
Google Analytics	_ga	Used to distinguish users	Persistent	2 years	Here
Google Analytics	_ga_<container-id>	Used to persist session state	Persistent	2 years	Here
Microsoft Clarity	_clck	Persists the Clarity User ID and preferences, unique to that site, on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.	Persistent	13 months	Here
Microsoft Clarity	_clsk	Connects multiple page views by a user into a single Clarity session recording.	Persistent	30 days	Here
Microsoft Clarity	CLID	Identifies the first-time Clarity saw this user on any site using Clarity.	Persistent	13 months	Here

You can manage or disable cookies at any time through your browser settings. You can also adjust your preferences through our Cookie Settings tool. Please note that disabling certain cookies may affect the functionality of DojoCode.