Privacy Policy

We collect the following categories of data:

• Account data: Username and email address, collected when you create an account.
• SQL query data: Queries you run in the sandbox are temporarily logged for debugging and platform improvement. Queries are not linked to personally identifiable information in analytics.
• Usage analytics: Page views, session duration, device type, and country (via cookies and server logs). No cross-site tracking.
• Payment data: If you upgrade to Premium, payment is processed by Razorpay. We do not store card or bank details. We only store the transaction status and plan type.

We do not collect: real names, phone numbers, IP addresses in user-facing records, or any biometric data.

• To authenticate you and manage your account
• To save your SQL query history and saved queries
• To track your learning progress (XP, streaks, badges)
• To send transactional emails (account confirmations, password resets)
• To improve platform performance and fix bugs
• To display anonymised analytics on platform usage

We do not use your data for advertising profiling, sell it to data brokers, or share it with any third parties except as described below.

We use the following types of cookies:

• Essential cookies: Authentication session token (sqlab_token). Required for login to function. 7-day expiry.
• Analytics cookies: Google Analytics (anonymised). Tracks page views and session duration to help us understand which features are used. You can opt out via your browser settings or a browser extension like uBlock Origin.

We do not use third-party advertising cookies.

We share data with the following service providers only:

• Railway.app — Backend hosting (PostgreSQL database)
• Vercel — Frontend hosting
• Razorpay — Payment processing (Premium plan only)
• Google Analytics — Anonymised usage analytics

All providers are under contractual obligations to protect your data and not use it beyond service delivery. We never sell your data.

• Account data is retained as long as your account is active.
• Query history is retained for up to 12 months.
• If you delete your account, all associated data is permanently deleted within 30 days.
• Anonymised analytics data may be retained indefinitely in aggregated form.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability

To exercise any of these rights, email us at support@sqlabhub.com. We will respond within 30 days.

We take reasonable measures to protect your data:

• Passwords are hashed using bcrypt (rounds: 12)
• All connections use HTTPS/TLS
• Authentication uses short-lived JWTs
• SQL execution runs in a fully sandboxed in-memory engine — your queries never touch a real database

No system is 100% secure. If you discover a vulnerability, please report it to support@sqlabhub.com.

SQLab Hub is not directed at children under 13. We do not knowingly collect data from users under 13. If you believe we have done so inadvertently, contact us immediately.

We may update this policy from time to time. We will notify you by updating the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance.

For any privacy-related questions or data requests:
support@sqlabhub.com