Privacy Policy
Leetspace is a small student project run by 0x0m3g4sus. This policy describes in plain language what data the app collects, why, and what your rights are. Last updated: September 2026.
1. Account data
When you sign in with 42 Intra the app receives your name, email address, profile picture, 42 login, campus and coalition.
2. Content you create
Everything you post is stored so the app can show it back to you and your peers: posts, comments, likes, follows, direct messages (including edits, replies and read receipts), game moves, rooms and win/loss records, notifications, and your nickname, bio and last-seen timestamp.
Posts, comments, likes, follows and profiles are visible to every logged-in member. Direct messages are visible only to the two participants. Learning-space messages are visible to members of that space. Deleted posts and comments are removed from feeds; deleted DMs disappear for both sides.
3. Technical data
Login sessions live in a signed, httpOnly cookie that expires after 7 days — JavaScript on the page can never read it. Your sound preference is kept in your own browser (localStorage), never sent anywhere. The app makes no advertising or analytics calls. External requests are limited to 42 Intra for login and, when a profile has a favorite track or artist, Spotify embeds that are loaded only on that profile page.
4. Where data lives & who can touch it
All data is stored in Firebase Realtime Database hosted in the EU (europe-west1). Direct access from browsers is fully denied at the database level — every read and write goes through this application's server, which checks that you are logged in and only lets you touch your own data (or public content) before anything reaches the database.
5. Your rights & deletion
6. Changes
If this policy changes, the updated date at the top changes with it. Continued use of Leetspace after changes means you accept the new policy.