Privacy Policy

Last updated: 17 July 2026

RisingEdge.pro ("we", "us", "our") is operated by VANTABYTE LTD, a company registered in England & Wales (company number 15622244), registered office 20 Wenlock Road, London, England, N1 7GU. We are the data controller for the personal data described in this policy.

This policy explains what personal data we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.

1. Data we collect

  • Account data: email address, username, and (for password accounts) a hashed password. If you sign in with Google or GitHub, we receive your email and basic profile from that provider.
  • Learning data: your progress, submitted HDL code, simulation/synthesis runs, and bookmarks. The code you submit with each run is stored together with that run's results: it powers your submission history and share links, and it helps us diagnose and fix bugs or tool errors when a run fails.
  • Payment data: if you buy the Course, payment is processed by Paddle, the merchant of record. We do not receive or store your full card details; we store a Paddle customer/transaction reference, when you bought, and when your access expires.
  • Communications: messages you send us (e.g. the contact form or feedback) and related correspondence.
  • Technical data: IP address, browser type, and request logs, used to operate and secure the service. Anonymous visitors can run code without an account: those runs are rate-limited per IP address, and we keep aggregate daily guest counters (derived from IPs, not the IPs themselves) for up to 90 days. Anonymous runs are otherwise not stored - unless you share one: if you share a run, its code and results are stored and publicly visible to anyone with the link, whether or not you have an account.
  • Analytics data: we run a self-hosted, cookieless analytics tool (Umami) on our own server. It records pageviews, referrer, approximate country, and browser/device type, and estimates visitor counts without cookies or cross-site tracking. We do not use any third-party analytics or advertising services.

2. How and why we use your data (lawful bases)

  • To provide the service (accounts, lessons, running your code, saving progress): performance of a contract.
  • To process your Course purchase: performance of a contract (via Paddle).
  • To secure and maintain the service (rate limiting, abuse prevention, error diagnostics, logging): legitimate interests.
  • To understand aggregate site usage (self-hosted analytics as described above): legitimate interests.
  • To respond to your messages: legitimate interests.
  • To send service emails (email verification, password reset, important account notices): performance of a contract / legitimate interests.

3. Cookies and device storage

We use only strictly necessary cookies: to keep you signed in. Your sign-in session lasts up to 30 days; the short-lived API tokens it produces last up to 24 hours. We do not use tracking or advertising cookies and show no cookie banner; our analytics (above) are cookieless.

Like most code editors, we also use your browser's local storage for strictly functional data that stays on your device: unsaved code drafts, your language and theme preferences, and similar settings. This data is not sent to us except as part of code you choose to run or share, and you can clear it any time through your browser.

4. Who we share data with

We use the following providers to run the service:

  • Paddle: our merchant of record. Paddle is the seller of the Course and acts as an independent controller of the payment data it collects, under its own privacy policy.
  • Resend: sending transactional email (processor, on our instructions).
  • Cloudflare: DNS and inbound email routing (processor).
  • Hetzner: hosting, including our self-hosted analytics (servers located in the EU).
  • Sentry: application error tracking (processor); configured not to collect personal data by default.

We do not sell your personal data.

5. International transfers

Our servers are hosted in the EU (Hetzner). Transfers between the UK and EU are covered by the UK's adequacy regulations. Where a provider transfers data outside the UK/EU, appropriate safeguards (such as the UK International Data Transfer Agreement or addendum) apply.

6. Retention and deletion

We keep account and learning data for as long as your account is active. You can delete your account at any time from Settings → Delete account. Here is exactly what that does:

  • Your account record, email, progress, and bookmarks are deleted from the live systems immediately.
  • Runs you shared (and their share pages) are anonymised: the link to you is removed, the shared content remains.
  • Copies may persist in our encrypted backups for a limited period (currently up to 14 days for the most frequent tier) before they are overwritten; backups are never used to restore deleted accounts.
  • We retain limited records where the law requires it (for example, tax records relating to payments, kept by Paddle and us for statutory periods).

Other retention periods: request logs and error reports are kept for weeks, not years; aggregate guest counters for up to 90 days; analytics data is aggregate and kept while we operate the service; support correspondence is kept as long as needed to handle the matter and a reasonable period after.

7. Your rights

Under UK data protection law you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. You can erase your data yourself via Settings → Delete account; for anything else, email contact@risingedge.pro.

VANTABYTE LTD is registered with the Information Commissioner's Office (ICO), registration reference ZC186931. You also have the right to complain to the ICO at ico.org.uk if you are unhappy with how we handle your data, though we'd appreciate the chance to put things right first.

8. Children

The service is not intended for anyone under 16. We do not knowingly collect personal data from children under 16.

9. Security

We protect your data with measures including encrypted connections (HTTPS), hashed passwords, access controls, and isolated, sandboxed execution of submitted code. No system is perfectly secure, but we take reasonable steps to protect your data.

10. Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for material changes, notify you by email or an in-app notice.

11. Contact

Questions about this policy or your data? Email contact@risingedge.pro or write to VANTABYTE LTD, 20 Wenlock Road, London, England, N1 7GU.