Privacy Policy

1. Who We Are

This Privacy Policy applies to the website https://codekilla.com (and its preview environments) and any associated services we operate (collectively, "the Platform").

Business Name: Code-Killa · Owner: Rahul Chaudhary · Country of Operation: India · Support Email: codekillaindia@gmail.com

2. Data We Collect

• ▸Account data: name, email, and a bcrypt-hashed password when you sign up.
• ▸Profile data: optional avatar image (stored as a base64 data-URL).
• ▸Course activity: which lessons you opened, completed, or rated up/down.
• ▸Payment data: Stripe / Razorpay transaction IDs and status. We never see or store your card number, CVV, or UPI PIN.
• ▸Communications: any message you send via the contact form.
• ▸Technical data: IP addresses and request information may be processed for security, abuse prevention and service operation. With optional analytics consent, usage and approximate location may also be recorded.

3. How We Use Your Data

• ▸Provide the service — auth, lesson access, progress tracking, certificates.
• ▸Process subscription payments and issue refunds where applicable.
• ▸Reply to support enquiries you initiate.
• ▸Understand usage through optional analytics. If you are signed in, usage records may be linked to your account; they are not necessarily anonymous.
• ▸Send transactional email (account verification, password reset, payment receipts).
• ▸Send newsletters to subscribers, plus account-related subscription reminders and renewal offers. Newsletter messages include an unsubscribe link; contact us about other email preferences.

4. Cookies & Tracking

The application stores its sign-in token (ck_token) in your browser's localStorage, not an authentication cookie. Local storage also remembers language, theme, dismissed notices and your privacy choice. Optional presence analytics start only if you choose Allow analytics; you can withdraw that choice using Privacy preferences in the footer.

Third-party advertising, analytics and tag-manager snippets are currently disabled in the application. Search-engine ownership verification meta tags do not set cookies. Hosting services and payment pages may process request information under their own policies.

The homepage shows manually selected excerpts transcribed from Google review screenshots supplied by Codekilla. They are stored with the website, not fetched or synchronised through a Google API. Reviewer photos are not loaded from Google. Names that were not clearly readable are omitted rather than guessed. Links to Google's website are subject to Google's Privacy Policy: https://policies.google.com/privacy.

5. Advertising (Google AdSense)

Advertising is currently disabled on this site, including Google AdSense and auto ads. The privacy preference banner is not a Google-certified consent management platform.

If advertising is introduced, this policy and the consent implementation must be updated before ads load. Personalised and non-personalised advertising can both involve storage or data processing; declining consent must not silently enable advertising.

Account, payment, error, search, certificate verification and content-empty pages are not appropriate advertising placements. Advertising remains disabled on every template during the readiness review.

6. Data Sharing

• ▸Payment processors (Stripe / Razorpay) handle checkout and transaction data. Hosting and database services process application data, and our configured SMTP email service handles messages. AI features send your prompts and relevant conversation or lesson context to the configured AI service; do not include sensitive personal data in prompts.
• ▸We never sell your data, your email, or your learning activity to third parties.
• ▸We may share data when legally compelled (court order, valid government request) or to defend our legal rights.

7. Data Retention

The application stores account, learning and transaction records until they are removed through an authorised process. It does not currently enforce an automatic inactive-account deletion or anonymisation schedule. Contact us to request deletion; records needed for legal, billing or fraud-prevention obligations may need to be retained. We do not promise a specific retention period here.

8. Security

• ▸Passwords are stored using bcrypt with per-user salt — never as plain text.
• ▸Use the HTTPS website when submitting account or payment information.
• ▸Access controls restrict account-management functions. No online service can guarantee absolute security.
• ▸Some account-management actions have audit records. We do not claim that every administrative action is logged or that backup encryption has been independently verified.

9. Your Rights

To request access, correction, export or deletion of personal data, email codekillaindia@gmail.com with the subject Privacy Request. We may need to verify your identity and explain any records we are required to retain. Applicable rights and response deadlines depend on your jurisdiction; we do not offer a guaranteed 72-hour response.

If you are an EU/UK resident, you also have the right to lodge a complaint with your supervisory authority (e.g., the ICO in the UK).

10. Children

Code-Killa is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If you believe a child has signed up, email us and we will delete the account.

11. Changes to this Policy

We may update this policy as the platform changes. Review the current policy before using a new optional feature. This version was revised on 9 October 2026.

12. Contact

Privacy questions: codekillaindia@gmail.com or the contact form.