Privacy Policy

Last updated: January 18, 2026

1. Introduction

Welcome to forEach. Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our interview preparation platform.

forEach ("We", "Our", or "Us") is committed to protecting your privacy and ensuring transparency about how we handle your information.

2. Data Controller

Service: forEach
Contact:Contact us

3. Data We Collect

3.1 Account Information (Optional)

When you choose to create an account, we collect:

  • Email address
  • Display name
  • Profile picture (if provided via OAuth)
  • Authentication provider information (Google, GitHub)

3.2 Progress & Activity Data (For Authenticated Users)

To provide personalized learning features, we track:

  • Lesson completion status
  • Exercise attempts and results
  • Learning progress and statistics
  • Activity streaks and daily activity
  • Timestamps of interactions

3.3 Technical & Analytics Data

We automatically collect:

  • Browser type and version
  • Device information
  • IP address (anonymized)
  • Pages visited and time spent
  • Referral source
  • Language preference

4. How We Use Your Data

We use collected data to:

  • Provide and maintain the forEach service
  • Enable user authentication and account management
  • Track and display your learning progress
  • Personalize your learning experience
  • Improve our content and platform functionality
  • Analyze usage patterns and optimize performance
  • Ensure platform security and prevent abuse

5. Third-Party Services

5.1 Firebase (Google)

We use Firebase for authentication and data storage. Firebase may collect additional technical information as described in their privacy policy.

5.2 Google Analytics

We use Google Analytics to understand how users interact with our platform. Google Analytics uses cookies to collect anonymized usage data. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Learn more: Google Privacy Policy

5.3 Microsoft Clarity

We use Microsoft Clarity to understand user behavior through heatmaps and session recordings (anonymized). Clarity does not collect personally identifiable information.

Learn more: Microsoft Clarity Terms

5.4 Google Search Console

We use Google Search Console to monitor and optimize our website's search performance.

6. Data Sharing

We do not sell your personal data.

Your data may be shared only with:

  • Service providers necessary for platform operation (Firebase, Google Analytics, Microsoft Clarity)
  • Law enforcement, if required by law or to protect our legal rights

7. Data Retention

  • Account data: Retained while your account is active
  • Progress data: Retained to maintain learning history
  • Analytics data: Aggregated and anonymized, retained indefinitely
  • Deleted accounts: All personal data permanently deleted within 30 days

8. Your Rights

You have the following rights regarding your personal data:

8.1 GDPR Rights (EU Users)

  • Right to access: Request a copy of your data
  • Right to rectification: Correct inaccurate data
  • Right to erasure: Delete your account and data
  • Right to data portability: Export your data
  • Right to object: Object to certain data processing
  • Right to withdraw consent: Withdraw consent at any time

8.2 CCPA Rights (California Users)

  • Right to know: What data we collect and how it's used
  • Right to delete: Request deletion of your data
  • Right to opt-out: Opt-out of data "sale" (we don't sell data)
  • Right to non-discrimination: Equal service regardless of privacy choices

8.3 Exercising Your Rights

To exercise any of these rights, please contact us.

We will respond within 30 days of your request.

9. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • Authentication and session management
  • Language preference storage
  • Analytics and performance monitoring
  • User experience optimization

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

10. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure authentication via Firebase
  • Regular security audits
  • Access controls and monitoring

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

forEach is available to users of all ages. However, we do not knowingly collect data from children under 13 without parental consent. If you believe we have collected data from a child under 13, please contact us immediately.

12. International Data Transfers

Your data may be processed in countries outside your residence (e.g., Firebase servers in the US). We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date.

Your continued use of forEach after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us.