Privacy policy

Data we process

• Your Google account identity, used only to sign you in: your name, email address, profile image, Google account id, and sign-in sessions.
• Practice data: the LeetCode problems you practice (title, difficulty, statement, topics, and similar questions), your practice sessions (start and finish times, active time, ratings), the submissions you make during a session (code, language, verdict, runtime and memory, and the failing test case and judge output), and the LeetCode username they were made from, so one session never mixes two LeetCode accounts.
• What you create or confirm: notes, review schedule and history, and mistake records you confirm.
• Settings: language, time zone, review preferences, and, if you add one, your AI provider, model, and API key. Your API key is encrypted before it is stored.
• Usage data: the hosting platform keeps request logs (such as IP address, time, and path) for operation and security, and Vercel Web Analytics and Speed Insights record page views and performance without advertising identifiers. We do not sell personal data or use it for advertising.

Chrome extension

• The extension runs only on leetcode.com problem pages, and it talks only to leetcode.com and ankileet.com.
• When you open a problem page, it sends that problem's identifier to your ankileet account so it can show whether the problem is tracked or due for review.
• Only during a practice session that you start does it read your submissions for that problem from LeetCode (through your existing LeetCode login in the browser) and send them to ankileet. It does not read your browsing history or other pages.
• It reuses your ankileet web sign-in and stores no password or separate API token. Chrome local storage keeps your preferences and the signed-in account, the extension's own IndexedDB keeps practice work waiting to sync, and short-lived tab tokens stay in session storage. Removing the extension deletes this local data.

AI session analysis

• Session analysis is optional and runs only with an API key you provide; ankileet never uses its own key or credits for it.
• When a session is analyzed, the problem details and the session's evidence (submission verdicts, code revisions or diffs, and judge output, limited in size) are sent to the provider you selected: Anthropic, OpenAI, DeepSeek, or Google Gemini. That provider processes the request under its own terms and privacy policy, and usage is billed to your provider account.
• Analysis results are suggestions. A suggested mistake counts toward your mistake profile only after you confirm it.

Who else processes data

• Service providers that run ankileet: Vercel (hosting, background jobs, and analytics), Turso (database), Google (sign-in), and, only for analysis you enable, the AI provider whose key you saved.
• We do not sell, rent, or share your data for advertising, and we do not disclose it to anyone else unless required by law or necessary to protect the service and its users.

Retention, security, and your choices

• Your data is kept while your account exists. From Settings you can export a full copy (NDJSON) or permanently delete your account and its data. Database backups made for recovery may still contain deleted data until they are replaced.
• Data is sent over HTTPS, every database query is scoped to the signed-in user, and saved AI keys are encrypted at rest with AES-256-GCM.
• You can remove your saved AI key, sign out, or uninstall the extension at any time. No internet service can guarantee absolute security; sign out of ankileet if a device or browser profile is compromised.

Questions or privacy requests

Open an issue in the project repository: github.com/Joey-1218/ankify/issues