What we collect

• Name and email address on registration
• Level submissions you paste for grading
• Payment confirmation from Lemon Squeezy (no card data — we never see it)
• Login timestamps

How we use it

• To authenticate you and track your progress
• To send your submission to Google Gemini for grading (stateless — not stored by Google for training)
• To issue your certificates

Data retention

Submissions are deleted after 90 days. Account data is retained until you request deletion.

Your rights (GDPR)

• Right to access your data
• Right to erasure — email support@loveuad.com
• Right to data portability
• Right to object to processing

Third parties

• Google Gemini API — grades your submissions. Stateless calls. No training on your data.
• Lemon Squeezy — processes payments. PCI compliant. We receive only confirmation.
• Neon PostgreSQL — database hosted in EU-West region.