Legal
Privacy Policy
Leetly holds your practice history. This page says exactly what that means: what is stored, who can see it, and how to get rid of it.
Last updated 3 August 2026
1. Information we collect
You create a Leetly account with an email address and a password. We store:
- Your email address
- A display name, if you choose to set one
- A BCrypt hash of your password. The password itself is never stored and cannot be recovered from the hash
We also store the data you create in the app: problems, attempts, mistakes, notes, lists, review schedules, and the analytics derived from them.
2. How we use it
Your information is used only to:
- Sign you in and keep your session valid
- Store and return your own tracking data
- Generate your personal analytics and review schedule
We do not use your data for advertising or profiling, and we do not train anything on it.
3. Data sharing
We do not sell, rent, or share your personal information. Leetly does not send your data to any third party — there is no external identity provider, analytics service, or advertising network involved.
4. Storage and security
Data is stored in a PostgreSQL database on infrastructure we operate. All traffic runs over HTTPS. Passwords are hashed with BCrypt. Sessions use a short-lived access token held only in memory by your browser, paired with a rotating refresh token kept in an httpOnly cookie that JavaScript cannot read. Every database query is scoped to the signed-in account, so one account cannot reach another's data.
5. Retention and deletion
We keep your data for as long as your account exists. You can request deletion of your account and everything attached to it at any time; it will be removed within 30 days of the request.
6. Third-party services
Leetly does not integrate with any third-party service that receives your personal data. Problem metadata links out to leetcode.com, but following such a link is your action and sends nothing about your account.
7. Cookies
One cookie is used: the httpOnly session cookie holding your refresh token. It is strictly necessary to keep you signed in. There are no tracking, analytics, or advertising cookies.
8. Your rights
You have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data and account deleted
- Withdraw consent for processing at any time
9. Changes to this policy
This policy may be updated. Changes appear on this page with a new date above. Continuing to use Leetly after a change means you accept the updated policy.
10. Contact
For questions about this policy, or to exercise any of the rights above, open an issue on the GitHub repository.