Privacy Policy

Last updated: 16 October 2026

ScratchLLM ("the site", scratchllm.com) is a personal, non-commercial project run by an individual developer based in Italy, who is the data controller. Contact: privacy@scratchllm.com.

This page explains what data the site handles, why, and what you can do about it.

Using the site without an account

  • No tracking, no analytics, no advertising. The site sets no cookies for tracking.
  • Your progress (solved problems, when you last opened them, code drafts) is stored only in your browser (localStorage). It never leaves your device unless you sign in.
  • Your code runs in your browser (Pyodide). It is not sent to our servers.
  • Like any website, the hosting provider (Vercel) processes technical data such as your IP address and browser type to deliver pages and protect the service. The Python runtime is downloaded from the jsDelivr CDN, which also sees your IP address.

Using the site with an account

Signing in is optional. If you sign in with GitHub or Google, we receive from that provider:

  • your email address, name, profile picture URL and account identifier.

We store, linked to your account:

  • which problems you solved and when;
  • when you last opened each solved problem (used to mark it for review after two months);
  • the latest version of your code for each problem (saved when you press Run or Reset).

We use this data only to sync your progress across devices. We do not sell it, share it for marketing, or use it to train models.

Legal basis: providing the service you asked for (GDPR Art. 6(1)(b)); security logs are kept on the basis of legitimate interest (Art. 6(1)(f)).

Who processes the data

Provider Role Location
Supabase Authentication and database EU (Frankfurt)
Vercel Hosting Global, Vercel Inc. (USA)
GitHub / Google Sign-in providers, only if you choose them USA

Transfers outside the EU rely on the providers' standard contractual clauses.

How long we keep it

Account data and progress are kept until you ask us to delete your account. Signing out removes the copy stored in that browser.

Your rights

You can ask to access, correct, export or delete your data, or object to its processing, by writing to the contact address above. You can also lodge a complaint with your data protection authority (in Italy: the Garante per la protezione dei dati personali).

Changes

If this policy changes, the date at the top will change too.