Privacy
Policy.

We collect information you provide directly — such as your name, email address, and username when you register for an account or contact us.

We automatically collect certain usage data when you interact with CodeSpell, including IP addresses, browser type, pages visited, and actions taken within the platform. This data is used solely to operate and improve the service.

If your institution connects CodeSpell to an LMS (Canvas, Moodle, Blackboard), we receive only the data necessary to sync grades and assignments — typically student identifiers, submission content, and grade values.

To provide, maintain, and improve the CodeSpell platform.

To communicate with you about your account, product updates, and support requests.

To generate anonymised, aggregated analytics that help us understand how the platform is used.

We do not sell your personal data to third parties. We do not use student submission content to train AI models.

All data is stored on servers located in the European Union.

We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-128). Access to production data is restricted to authorised personnel only and is subject to audit logging.

Submission content and grades are logically isolated per user. No professor can access another professor's data, and no student can access another student's data.

Account data is retained for the duration of your use of the platform and deleted within 90 days of account closure upon request.

Submission content and grades are retained for the academic year in which they were created, unless your institution configures a longer or shorter retention window.

Anonymised, aggregated analytics data may be retained indefinitely.

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Requests can be submitted to privacy@codespell.net.

EU and UK residents have additional rights under GDPR and UK GDPR, including the right to object to processing and the right to lodge a complaint with a supervisory authority.

Requests will be acknowledged within 5 business days and fulfilled within 30 days.

We use strictly necessary cookies to operate the platform (session management, CSRF protection). We do not use advertising or tracking cookies.

For more detail, see our Cookie Policy.

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before the changes take effect.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

Questions about this policy should be directed to privacy@codespell.net or by writing to CodeSpell., Porto, Portugal.