SkillBoss (“SkillBoss”, “we”, “us”) is operated by Hamdi Hadrich, based in France. This policy explains what personal data we collect on skillboss.dev, why, how we protect it, and the rights you have over it. Questions: contact@skillboss.dev.
1. Data we collect
When you sign in with LinkedIn (via “Sign in with LinkedIn” / OpenID Connect, scopes openid, profile, email — we request no write access to your LinkedIn account): your LinkedIn member ID, display name, email address, avatar URL, and headline.
When you sign in with GitHub (via “Sign in with GitHub” / OAuth 2.0, scopes read:user and user:email — we request no write access to your repositories or your GitHub account): your GitHub numeric user ID, your name or username, your primary verified email address, and your avatar URL. We read your email addresses only to identify your primary verified one; we do not store the others. If that email matches an account you already created with LinkedIn, we link the two rather than create a second account.
From your use of the product: quiz results (scores, answers, timings, dates), streaks and challenge tiers, and — only if you have not opted out — your leaderboard entry (display name, avatar, score, streak, tier).
Technical, minimal: your IP address (to derive your timezone and apply abuse rate-limiting) and standard server logs needed to run and secure the service.
2. What we do not collect
- No browsing behavior outside SkillBoss.
- No precise location (only an IP-derived timezone).
- No device fingerprinting.
- No third-party advertising or tracking cookies.
- We do not sell your personal data, ever.
3. How we use your data
- To authenticate you and keep you signed in.
- To run the daily challenge, score it server-side, and keep your history.
- To display the public leaderboard (unless you opt out).
- To secure the service (rate-limiting, abuse prevention) and fix problems.
- To comply with legal obligations.
4. Legal bases (GDPR)
Performance of a contract (providing the service); legitimate interests (security, abuse prevention, keeping your learning history); and consent for anything optional, such as appearing on the public leaderboard, which you can withdraw at any time.
5. Cookies & local storage
SkillBoss keeps you signed in with a short-lived token (1 hour) held in memory only — it is not stored in cookies, localStorage, or sessionStorage, and it disappears when you close the tab. We use no tracking or advertising cookies. If strictly-necessary cookies are added later, they will be Secure and SameSite=Strict, and this policy will be updated.
6. Who we share data with
Only the processors needed to run SkillBoss: LinkedIn (to authenticate you), our hosting provider and database (to store and serve your data), and authorities or third parties only where legally required. We do not share your data for advertising, and we do not sell it.
7. International transfers
Some processors (e.g. LinkedIn, hosting) may process data outside your country. Where that happens, transfers rely on appropriate safeguards such as EU Standard Contractual Clauses.
8. Data retention
We keep your data while your account is active, and retain your quiz history so you keep your progress. On an account-deletion request we delete or anonymize your personal data; backups are purged on their normal cycle.
9. Your rights
Depending on where you live (GDPR/EEA, UK, CCPA/California, and others), you may access, correct, delete, or export your data, object to or restrict certain processing, and withdraw consent. You can also hide yourself from the public leaderboard at any time in your profile settings. To exercise any right, contact contact@skillboss.dev. You may also complain to your data protection authority.
10. Security
We protect your data with HTTPS/TLS everywhere (HSTS in production), tokens that expire quickly and are never stored in the browser, hardened HTTP security headers and a Content Security Policy, per-user rate-limiting, parameterized database queries, and secrets kept in environment variables. No method is 100% secure, but we design for data minimization and defense-in-depth.
11. Children
SkillBoss is for professionals and learners and is not directed to children under 16. We do not knowingly collect their data; contact us and we will remove it.
12. Changes to this policy
We may update this policy; we will change the effective date above and, for material changes, provide a clearer notice. Continued use after an update means you accept the revised policy.
13. Contact
contact@skillboss.dev · Hamdi Hadrich, France.