Privacy Policy

We collect the following, depending on how you use Skillpato:

• Account data — your email address and authentication details, handled by our auth provider (Supabase). Passwords are stored by that provider, never by us in plaintext.
• Profile data — your chosen field, role, interests/skills, and a pseudonymous display alias (an adjective + animal generated for you, which you can change).
• Optional profile media & contact — a profile image, a resume (PDF), and contact details (phone, LinkedIn / portfolio / GitHub links) if you choose to add them. These are optional and you can remove them any time.
• Practice activity — the questions you answer, correctness, XP, skill scores per topic, and streak, so we can show your progress and leaderboards.
• Assessment responses — if a recruiter invites you to a skill assessment and you choose to take it, the answers you submit and the resulting score. These are kept separate from your practice activity and never change your practice skill score.
• Support messages — the name, email, and message you send through our contact form.
• Push notification data — if you turn on push notifications, we store the push subscription your browser gives us (an endpoint URL and encryption keys from your browser's push service, such as Google, Mozilla, or Apple) plus your notification preferences, so we can send the reminders you asked for (like a daily streak reminder). This is optional, off until you enable it, and we delete it when you turn push off or your browser revokes it.
• Usage & device data — pages viewed, actions taken, approximate location (from IP), browser and device info, collected via analytics tools and cookies.

Skillpato is not directed to children under 16, and we do not knowingly collect their data.

• Provide the Service — run practice sessions, score skills, and show your progress and leaderboards.
• Personalize — target questions to your field, role, and interests, and rank remote job listings by the skills you've practiced.
• Communicate — respond to support requests and send service-related messages.
• Notify you — send reminders and updates you choose to receive (like a daily streak reminder), shown in the app and, if you turn them on, as browser push notifications you can disable any time in your notification settings or your browser.
• Improve — understand how the Service is used and make it better.
• Security & integrity — detect abuse, prevent fraud, and keep skill scores credible.
• Legal — comply with applicable law.

We use cookies and similar technologies for essential functions (keeping you signed in, remembering your theme) and for analytics. Our analytics providers are Mixpanel and Google Analytics 4, which help us understand product usage. You can control cookies through your browser settings; disabling some may affect functionality.

Some pages (such as our Learn articles) display ads served by Google AdSense. Google and third-party vendors use cookies to serve ads based on your prior visits to Skillpato and other websites. You can opt out of personalized advertising in your Google Ads Settings (adssettings.google.com), or opt out of some third-party vendors at aboutads.info. For more on how Google uses information from sites that use its services, see policies.google.com/technologies/partner-sites. Visitors in the EEA and UK are asked for consent before advertising cookies are set.

Most job listings are aggregated from a third-party job-data provider. Matching happens on our side, using your skill and profile data — we do not send your personal information to that provider (we only request public listings by job type). When you click to apply to an aggregated listing, you are taken to a third-party website we do not control, with its own privacy practices; this policy does not cover those sites.

Some listings are posted directly by recruiters on Skillpato. For those, you apply in-app — which shares your contact details and resume with that recruiter, as described in “How we share information.” We don't send emails on your behalf; recruiters reach out to you directly.

We do not sell your personal information. We share it only with:

• Service providers who process data on our behalf — hosting (Vercel), database & authentication (Supabase), analytics (Mixpanel, Google), advertising (Google AdSense), error monitoring (Sentry), and, once paid plans launch, a third-party payment processor.
• Legal & safety — when required by law or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

Recruiters (employer side). Skillpato has a recruiter marketplace. What recruiters can see about you depends on your own choices:

• If you turn on “Discoverable” (off by default, changeable any time), recruiters on eligible plans may find you in candidate search and see a PSEUDONYMOUS profile: your alias, your per-topic skill scores, and role/seniority/English level. They do NOT see your name, email, phone, or resume, and never your XP or individual answers. We log when a recruiter views your profile.
• When you apply to a recruiter-posted job, or accept a recruiter's invitation, you consent to share your contact details and resume (as they were at that time) with that specific recruiter, so they can reach you off-platform. This applies only to that recruiter.
• When you take a skill assessment a recruiter invited you to, you consent to share your responses and your result with that specific recruiter. Assessment results are kept separate from your practice skill score, and are shown to the recruiter pseudonymously (by your alias) unless you opt in to share your contact details with them (for example, by checking the share-contact box when you start the assessment).
• Your profile image, if you add one, is public — it can appear next to your alias on leaderboards and to recruiters.

Being discoverable is always opt-in and reversible in your profile settings.

Public profile. Separately from recruiter discoverability, you can turn on a public profile (off by default). When on, a page at skillpato.com/u/<your-handle> shows a PSEUDONYMOUS view — your alias, your profile image, and whichever of these you choose to display: your per-topic skill scores, your rating, badges, streak, current role, and professional links (LinkedIn / GitHub / portfolio). Anyone with the link can view it, it may be linked from public leaderboards, and search engines may index it. It NEVER shows your email, phone, resume, or real name. You can make it private again — or change what it shows — any time in your profile settings.

We keep your information while your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or fraud-prevention purposes. See our Data Deletion page for details.

Skillpato is operated from Costa Rica and uses providers that may process data in other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

Depending on where you live (e.g., under the GDPR or similar laws), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit most profile data in your account, and you can request access, export, or deletion by contacting us.

To exercise these rights, email skillpatoapp@gmail.com or use our contact form at www.skillpato.com/contact. We may need to verify your identity before acting on a request.

We use technical and organizational measures to protect your data, including encryption in transit, access controls, and least-privilege database access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this policy from time to time. We will change the date above and, for material changes, provide a more prominent notice. Continued use of the Service after changes take effect means you accept the updated policy.

Questions about privacy? Contact Skillpato — email skillpatoapp@gmail.com or use our contact form at www.skillpato.com/contact.