Effective date: May 2026 · Last updated: May 2026
myqubit.dev ("we", "our", "us") is an interactive quantum computing education platform and the data controller for personal data collected through this service. For privacy inquiries, contact us at privacy@myqubit.dev.
When you register: your name, email address, and a bcrypt-hashed password. We never store your password in plain text. Your account also stores: subscription tier, XP, level, streak count, and onboarding status.
Lesson completions, code submissions, XP earned, streak count, achievements unlocked, daily challenge attempts, and hint usage count. This data powers your learning progress and leaderboard ranking.
We use Stripe for payment processing. We never store your card number or CVV. We store a Stripe customer ID and subscription status to manage your Pro access. Stripe's privacy policy governs payment data: stripe.com/privacy.
With your consent, we use PostHog to track pseudonymous usage events (e.g., playground opened, lesson started) to improve the platform. If you have enabled "Do Not Track" or declined analytics via our cookie banner, PostHog is not initialized. We may also use Google Analytics (Google Tag Manager) to measure traffic. This is also subject to your consent choice.
We collect your IP address for rate limiting and fraud/abuse prevention on sensitive endpoints (login, registration, checkout, AI hints). IP addresses used for rate limiting are stored temporarily in our Redis cache and are not retained long-term or linked to your account profile.
When you log in, a signed JWT session token is stored in a secure cookie. It contains: your user ID, email, display name, avatar URL, and onboarding completion status. This data is used solely to authenticate your requests.
Circuits saved in the Quantum Playground may be set to public (visible to all users) or private. Public circuits are searchable and display a view count. We store the circuit name, gate sequence, and your user ID with each saved circuit. Mark circuits as private if you do not want them publicly visible.
We send transactional emails (email verification, password reset) via Resend. We do not send marketing email without your explicit consent.
For users in the European Union or European Economic Area, we process your personal data under the following lawful bases as defined in GDPR Article 6:
We do not sell your personal data. We share data only with the following processors, each bound by data processing agreements or standard contractual clauses where required by GDPR:
You have the following rights regarding your personal data. EU/EEA users have these rights under GDPR. To exercise any right, email privacy@myqubit.dev and we will respond within 30 days.
We use the following cookies and local storage:
Pyodide (the quantum runtime) runs entirely client-side via WebAssembly and does not send your code to our servers except when you explicitly submit a lesson for grading or request an AI hint.
Passwords are hashed with bcrypt (cost factor 12). All connections use HTTPS/TLS. We enforce HTTP Strict Transport Security, Content Security Policy, and rate limiting on all sensitive endpoints. Stripe webhook signatures are verified on every webhook event. JWT tokens are signed with a secure secret and expire after the session window.
myqubit.dev is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us at privacy@myqubit.dev and we will delete it promptly.
Our infrastructure is hosted in the United States (Vercel, Neon). If you are in the EU/EEA, your data is transferred to the US under Standard Contractual Clauses or equivalent transfer mechanisms where applicable. Stripe is certified under the EU-US Data Privacy Framework.
We may update this policy. If we make material changes, we will notify you via email or a notice on the platform at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.
Questions about this policy or requests to exercise your rights? Email privacy@myqubit.dev. We aim to respond within 5 business days and resolve all requests within 30 days.