Privacy Policy
Last updated: February 2026
1. What We Collect
When you use SkilleTreeOSS, we collect only what is necessary to provide the service:
- Account data — email address, display name, and OAuth profile picture (if you sign in with GitHub or Google).
- Progress data — which skill tree nodes you have marked as completed.
- Resource feedback — your upvote or downvote on individual learning resources.
2. What We Do NOT Collect
- We do not collect payment information. The platform is free.
- We do not sell, rent, or share your data with third parties for advertising.
- We do not use tracking pixels, third-party analytics, or fingerprinting.
- We do not store passwords — authentication is handled by Supabase using OAuth or hashed credentials.
3. How We Use Your Data
- To display your learning progress across sessions and devices.
- To aggregate anonymous resource quality signals (upvotes/downvotes) to surface the best content.
- To send transactional emails (e.g. email confirmation) — no marketing emails.
4. Data Storage
Your data is stored in Supabase (PostgreSQL) with Row-Level Security enabled. Only you can read and write your own progress and feedback rows. Supabase is hosted in the EU (Frankfurt) by default.
5. Third-Party Services
- Supabase — authentication and database. Supabase Privacy Policy.
- GitHub OAuth — if you choose to sign in with GitHub. GitHub Privacy Statement.
- Google OAuth — if you choose to sign in with Google. Google Privacy Policy.
6. Your Rights
You can at any time:
- Access your data via your Dashboard.
- Delete your account and all associated data by opening an issue on GitHub. We will process the request within 30 days.
- Export your progress data — contact us via GitHub.
7. Cookies
We use only strictly necessary cookies for session management (Supabase auth token stored as an HTTP-only cookie). No third-party tracking cookies.
8. Contact
Privacy questions or data requests? Open an issue on GitHub.