Privacy Policy

Effective: September 29, 2026 · Last updated: September 29, 2026

This policy explains what Eng AI collects, where it goes, and what you can do about it. It is written to be read, not to be survived.

Contents

1. Who we are
2. What we collect
3. How we use it
4. AI processing
5. Third-party services
6. Cookies and local storage
7. Referral invites
8. Who we share data with
9. How long we keep it
10. Your rights and choices
11. Security
12. Minors
13. Where your data is processed
14. Changes to this policy
15. Contact

1. Who we are

Eng AI is an engineering interview practice site at interview.engineer, operated by [YOUR FULL NAME], an individual based in the United States. Throughout this policy, "we" means that operator. You can reach us at [CONTACT EMAIL].

2. What we collect

Account information. Your email address, and a password that is stored hashed — we never see the password itself. A display name, which is optional; if you leave it blank we use the part of your email before the "@". If you sign in with Google instead, we receive your email address, name, and profile image URL from Google.

Profile information. An optional short bio and an optional location, up to 280 characters each. Both are free text and both are entirely up to you — leaving them empty costs you nothing.

The work you submit. When you answer a practice question we store what you submitted: typed text, photographs of handwritten working, PDFs, and sketches drawn in the browser. We also store the grade and written feedback produced for each submission, which includes a short restatement of what you did.

Job descriptions you paste. If you use the job matcher, we store the text you paste (up to 20,000 characters) and any file you upload, along with the company name if you give one. Job postings often contain other people's details — a recruiter's name, an email address, an office address. We store what you paste as you paste it and do not attempt to strip that out, so please remove anything you would rather not hand over.

Progress and usage. Which questions you have been matched with and attempted, your scores, streaks, bookmarks, private notes (up to 10,000 characters each), and your practice preferences.

Technical information. When you sign in we record the IP address and browser user-agent attached to that session. For people who are not signed in, we hold an IP address briefly to rate-limit the free tools (see section 6).

3. How we use it

To run the product: signing you in, grading what you submit, matching you to questions, and showing your progress. To keep it working and affordable: enforcing daily limits, preventing abuse, and fixing failures. To contact you about your account — email verification, and referral invitations you choose to send. We do not send marketing email; there is no mailing list.

4. AI processing

Your submissions are graded by AI, not by a person. When you submit an answer, the content of that submission is sent to a third-party AI provider that grades it and writes the feedback you see. That includes the photographs, PDFs and sketches you upload — the images themselves are transmitted, not just a description of them. The same applies to the job matcher: the job description you paste is sent to the same kind of provider to be analysed.

What reaches the provider is your work and the question it answers — nothing that says who you are. Your name, your email and your account ID stay here.

Grades and matches are generated automatically and are frequently wrong in small ways. They are a study aid, not an assessment of your ability, and nothing here is a hiring decision or a professional evaluation.

5. Third-party services

• AI grading and job matching — a third-party AI provider processes submissions and job descriptions, as described above.
• Cloudflare — hosts the site and stores the database, uploaded files, and short-lived caches. Effectively all of your data sits here at rest.
• Google — if you choose Google sign-in, for authentication only.
• Google Analytics — usage measurement. Only after you accept analytics cookies.
• Microsoft Clarity — session recording and heatmaps. Only after you accept analytics cookies. See section 6, which explains what this means more plainly than the name does.
• Resend — delivers account and referral email.

6. Cookies and local storage

Necessary, set without asking. A sign-in cookie that keeps you logged in. A cookie named eng_anon, set for one year, which lets us rate-limit the signed-out job matcher and survey — without it, the free tools could be run in a loop at our expense. It is a random identifier; it is not used for advertising and is not shared. We also keep your discipline preference in a cookie so the question finder opens where you left it.

Analytics, only if you accept. Google Analytics and Microsoft Clarity load only after you click Accept on the banner. Neither loads if you reject, and neither loads if you ignore the banner entirely.

What Clarity does, stated plainly. Microsoft Clarity records sessions — that is, a replay of pages you visited and how you moved through them — and builds heatmaps from it. Your typed answers, your private notes, and password fields are masked and are not captured in those recordings. Files you upload are not part of the recording. While you are signed in, Clarity also receives your account identifier, so replays can be grouped by account. That identifier is a random string rather than your name or email, but it is stable and it is linked to your account on our side, so we describe it as pseudonymous rather than anonymous.

Local storage. We store your analytics choice and a couple of interface preferences in your browser. These never reach our servers.

You can change your analytics choice at any time from the "Manage cookie preferences" control on this page or in your account settings. Withdrawing consent stops future recording; it does not retroactively delete recordings already made, and a recording already in progress ends when you next load a page.

7. Referral invites

If you invite someone by email, we store the address you entered, indefinitely, along with who sent it and when. We email that person once, telling them who invited them.

Two things worth being clear about, because they involve someone who has not agreed to anything. First, we store an address for a person who may never become a user, and they did not give it to us — you did. Second, if they do sign up, the person who invited them can see that they joined and roughly how much practice they have done, as part of tracking the referral reward. They are not shown this.

Every invitation email includes a link to opt out. Opting out removes the address and prevents anyone from inviting it again. If you were invited and want your address removed without clicking that link, email [CONTACT EMAIL].

8. Who we share data with

The service providers in section 5, each doing a specific job on our behalf. Otherwise: only where the law requires it, or to investigate abuse or protect someone's safety.

We do not sell your personal information. We do not share it with data brokers, we do not run advertising, and we do not use your work to train AI models.

If the site is ever transferred to someone else, your information could be part of that transfer. If that happens, we will say so here first.

9. How long we keep it

Plainly: until you delete it. There is no automatic expiry. Your account, submissions, uploaded files, grades, notes and job descriptions are kept for as long as your account exists.

Deleting your account removes your profile, your submissions and the files you uploaded, your grades, notes, bookmarks, job descriptions and progress. It also removes files that were uploaded but never submitted.

Some things outlive the account, and you should know which. Short-lived caches expire on their own within about three days. Records held by our service providers — email delivery logs, and anything retained by the AI provider under its own practices — follow their retention rules, not ours. We may keep a minimal record where we need it to comply with the law or resolve a dispute.

10. Your rights and choices

From your account settings you can: change your profile, change your analytics choice, export your data as a file, and delete your account. Deletion is immediate and cannot be undone.

If you are a California resident, the CCPA/CPRA gives you the right to know what we collect and why, to request deletion, to request a portable copy, and not to be treated differently for exercising any of it. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of on that front.

We extend the same practical rights — access, correction, deletion, portability, and objection — to everyone, wherever you are, rather than operating two standards.

To make a request, use the controls in your settings, or email [CONTACT EMAIL]. We aim to respond within 30 days, and we may need to confirm you control the account first.

11. Security

Traffic is encrypted in transit. Passwords are stored hashed. Uploaded files are stored under keys scoped to your account, and one account cannot reference another's files. Administrative access is limited to the operator.

This is a small, independently run site, not an enterprise security programme, and no system is perfectly secure. If you find a vulnerability or believe your account has been accessed, email [CONTACT EMAIL] and we will take it seriously.

12. Minors

You must be at least 16 to use Eng AI. It is not intended for children, and we do not knowingly collect information from anyone under 16. If we learn that we have, we will delete the account and its data.

If you are a parent or guardian and believe a child under 16 has created an account, email [CONTACT EMAIL] and we will remove it.

13. Where your data is processed

Eng AI is operated from the United States and intended for users there. Your information is processed in the United States and wherever our providers operate. If you use the site from elsewhere, you are sending your information to the United States, where privacy law differs from your own.

14. Changes to this policy

When this changes materially we will update the date at the top and, where the change affects how your data is handled, tell account holders by email. Continuing to use the site after a change means you accept the updated policy.

15. Contact

Questions, requests, or corrections: [CONTACT EMAIL]. For deletion requests made by email rather than through your settings, include the address on the account so we can find it.