Privacy Policy for AnalystQuest

Who we are

AnalystQuest (analystquest.com) is made by Studio Nope (CODE PULSE IO S.R.L., Strada Pitar Moș nr. 27, etaj 5, ap. 17, Sector 1, București, Romania, CUI 49983990, trade register J2024008437408, "we", "us"). We are the controller of the personal data described here. Contact: hello@studionope.com.

This policy explains what data the site uses, why, and the choices you have.

1. Data that stays in your browser

Without an account, your progress is saved in your own browser: the levels you played, stars, fireflies (XP), your streak, the review queue, unlocked cases, your settings, the last code that passed each level and code you are still typing. We cannot read any of it. Each item is listed on the Cookies page. You can download it or erase it from Progress at any time.

2. Optional Google sign-in

Signing in is optional and only starts when you press "Continue with Google". Google then shares with us your name, email address, profile picture link and a Google account user ID (uid). Google's sign-in service, Firebase Authentication, keeps these as your sign-in record, with when you signed up and last signed in. We don't show or load your picture.

What we store. One document per player in Cloud Firestore, at users/<your uid>: your progress as in section 1 (except code you are still typing, which stays in the browser) and the time it was last saved. The database is in Google Cloud's eur3 multi-region, inside the European Union (Belgium and the Netherlands).

Only you can read or change your document; our database rules block everyone else, including other players. We use it only to keep and sync your progress: no ads, no profiling, no emails from us.

Deleting it. On Progress, press Delete my cloud data: your cloud document is deleted at once and you are signed out. The button also removes your sign-in record when Google allows it (shortly after a sign-in); otherwise write to hello@studionope.com and we delete it. Progress saved in your browser is not touched; erase it on the same page if you want.

3. Delivering the site

Like every website, the services that deliver it see your IP address and browser type:

• Firebase Hosting (Google) serves the pages and keeps standard technical logs to run and protect the site.
• jsDelivr, a public code network, delivers the Python engine the first time you open a Python level. Your browser downloads it directly; no cookies are involved.

4. Ads and statistics

The site shows no ads and runs no analytics today. It is built so that any ad or statistics script stays switched off until you press Accept in the cookie choices, and you can change your mind any time from Cookie settings at the bottom of every page. Before any goes live we update this page and the Cookies page.

5. What we do not collect

• No account unless you sign in, and then no password: Google handles it.
• No phone number, contacts, payment data or precise location.
• No analytics or advertising scripts in this version.
• We do not sell personal data.

6. Legal bases (EEA and UK)

• Running the site you asked for (progress in your browser, optional sign-in and sync): performance of a contract, GDPR Art. 6(1)(b).
• Server logs and the code network in section 3: our legitimate interest in a working, secure site, Art. 6(1)(f).
• Ads or statistics, if ever added: your consent, Art. 6(1)(a), which you can withdraw at any time.

You are never required to give us personal data. Without an account the site stays fully playable.

7. Sharing and international transfers

The only recipient of personal data is Google (Google Ireland Limited for users in the EEA and Switzerland, Google LLC elsewhere), acting as our processor for Firebase Authentication, Cloud Firestore and Firebase Hosting. Your progress is stored in the EU. Firebase Authentication is a global service and may process your sign-in record outside the EEA, including in the United States, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. jsDelivr delivers files only, as in section 3.

We may disclose information if the law requires it.

8. How long data is kept

• In your browser: until you erase it on Progress or clear this site's data.
• Your cloud copy: until you delete it. Signing out does not delete it, so it is there next time you sign in.
• Your sign-in record: until you delete your cloud data or ask us to remove it.
• Hosting logs: kept by Google for the periods in its terms.

9. Children

AnalystQuest teaches SQL and Python and is suitable for all ages, but it is not directed at children. Signing in is meant for people aged 16 or over (the age of digital consent in Romania); younger players can play fully without an account. If you believe a child signed in, contact us and we will delete the data.

10. Your rights

We have not appointed a data protection officer; the law does not require one for this site. Write to hello@studionope.com for any privacy question.

You have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent at any time. Most requests are answered by the controls on Progress (Delete my cloud data, Erase all progress). For a copy of your data or anything else, write to us. We answer within one month.

You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live.

11. Changes

When the site starts collecting new data (for example statistics or ads), we update this page before the change goes live and change the date at the top.

12. Contact

Studio Nope, CODE PULSE IO S.R.L., Strada Pitar Moș nr. 27, etaj 5, ap. 17, Sector 1, București, Romania · hello@studionope.com

AnalystQuest is made by Studio Nope (CODE PULSE IO S.R.L., Romania). CUI 49983990, trade register J2024008437408.