Skill Rally

Skill Rally

Бета
Записатися у вейтліст

Privacy Policy

Last Updated: October 14, 2026

This Privacy Policy explains how https://skillrally.app/ ("we", "us", or "our") collects, uses, and protects your information. We follow the General Data Protection Regulation (GDPR) and other data protection laws that apply to us.

1. Data Controller & Contact Information

The entity responsible for your personal data (the "Controller") on our mock interview platform is:

If you have questions about this Privacy Policy, your rights, or how we handle your data, please write to the email address above. We aim to answer all data requests within 30 days.

2. Legal Basis for Processing

We process your personal data on these legal bases under the GDPR:

  • Art. 6 (1)(b) GDPR (Contract): To give you the service you asked for — your account, matching with other users, and mock interviews.
  • Art. 6 (1)(a) GDPR (Consent): For analytics cookies, push notifications, and access to your Google Calendar. You can withdraw your consent at any time.
  • Art. 6 (1)(f) GDPR (Legitimate Interests): To keep the platform secure, prevent abuse, and find and fix errors.

3. Information We Collect & Why

We collect only the data we need to run the service:

  • Account Data: Your name and email address. You sign in with Google, Facebook, or GitHub. We use this data to identify you and save your progress.
  • Profile Data: Information you add to your profile, such as your title, position, skills, years of experience, companies, spoken languages, time zone, language, and availability. Other users can see your profile so that you can find each other for interviews.
  • Interview Data: Your interview requests, scheduled interviews, and the feedback and ratings that you give and receive after an interview.
  • Google Calendar (optional): If you connect your Google Calendar, we check when you are busy and add interview events to your calendar. We store a Google token for this. You can disconnect it at any time in your Google account.
  • Push Notifications (optional): If you allow notifications, we store a device token to send you reminders.
  • Technical Data: Your IP address, browser type, operating system, and error reports. We use this to keep the service secure and working well.

4. Video Calls

  • No Recording: We do not record or store the video or audio of your interviews.
  • How Calls Work: Calls in our app run through LiveKit. The video and audio pass through their servers only to connect you with the other person. If you choose Google Meet for an interview, the call takes place on Google Meet under Google's own terms.

5. Third-Party Processors

We work with these service providers. They process data only to provide their service to us:

  • Supabase: Our database. Data is stored in the EU (Ireland).
  • Hetzner: Servers that run our backend.
  • Netlify: Hosting for our website.
  • Cloudflare: Domain, network security, and protection against attacks.
  • Firebase (Google): Sign-in and push notifications.
  • Google: Google sign-in, Google Calendar (if you connect it), Google Meet (if you choose it), and Google Analytics (website traffic, only as described in the Cookies section).
  • Facebook and GitHub: Only if you use them to sign in.
  • Sentry: Finds errors and performance problems in our app. Error reports may include your IP address and user ID.
  • Amazon Web Services (Amazon SES): Sends our emails, such as interview reminders. Emails are sent from the EU (Frankfurt).
  • LiveKit: Runs the video calls in our app.

6. International Data Transfers

Our database is in the European Economic Area (EEA). Some of our providers (such as Google, Firebase, Netlify, Sentry, Cloudflare, and LiveKit) may process data outside the EEA, including in the United States.

To keep your data protected, we rely on:

  • Standard Contractual Clauses (SCCs): Contracts approved by the European Commission that give European data protection standards.
  • Data Privacy Framework (DPF): Providers certified under the EU-U.S. Data Privacy Framework.

7. Data Security

We use technical and organizational measures to protect your data:

  • Encryption: All traffic is encrypted with HTTPS (TLS). Our database is encrypted at rest.
  • Access Control: Only authorized system processes can access the database.
  • Reviews: We regularly check our code and infrastructure for security problems.

8. Data Retention & Deletion

  • Active Account: We keep your data while your account exists.
  • How to Request Deletion: See our Data Deletion Instructions page for step-by-step instructions.
  • Error Reports: Sentry deletes error reports automatically after no more than 90 days.
  • Analytics: Google Analytics keeps data for no more than 14 months.

9. Your Rights under GDPR

You have these rights over your personal data:

  • Right to Access: Ask for a copy of the data we have about you.
  • Right to Rectification: Ask us to correct wrong data. You can also edit most of it on your profile page.
  • Right to Erasure: Ask us to delete your data permanently.
  • Right to Portability: Ask for your data in a structured, common format.
  • Right to Object: Object to processing based on our legitimate interests.
  • Right to Withdraw Consent: Turn off analytics at any time with the Cookie settings link at the bottom of every page.
  • Right to Complain: Make a complaint to the data protection authority in your country.

To use any of these rights, email us at interview.rally@gmail.com.

10. Cookies

We use essential cookies to run the platform and analytics cookies to improve it. You can change your choice at any time with the Cookie settings link at the bottom of every page. If you reject analytics, we stop using analytics cookies and delete the ones already set.

  • session — skillrally.app · Essential · Keeps you logged in · 5 days
  • cookie_consent — skillrally.app · Essential · Remembers your cookie choice · 1 year
  • beta_access — skillrally.app · Essential · Gives access to the site during early access · 20 days
  • _ga — Google Analytics · Analytics · Tells unique visitors apart with a random number · 2 years
  • _ga_* — Google Analytics · Analytics · Stores and counts page views · 2 years

We also save some data in your browser's local storage: your sign-in state (Firebase), your question filters, a cache of company names, and your push notification token. This data stays on your device.

Cookie Categories:

  • Essential — Needed for the platform to work. They cannot be turned off.
  • Analytics — Help us understand how people use the service. You can turn them off at any time.

Image by macrovector on Magnific