Privacy Policy

1. Introduction

This Privacy Policy explains how QueryCraft collects, uses, stores, and protects information when you use the Service. QueryCraft is designed primarily as a local-first educational app, but some features may use server-side APIs, configured databases, cookies, or third-party AI services.

2. Information We Collect

Depending on the features you use, QueryCraft may collect or store local account details, Test module account information, learning workspace content, test content, AI analysis inputs, and account export or import data.

QueryCraft may also process browser storage data, essential cookies, request metadata, and Test DB diagnostic information when those features are used.

• Local account data: display name, account ID, role selection, creation time, and local password hash.
• Workspace content: SQL queries, schemas, query history, ER diagrams, normalization inputs, generated datasets, and settings.
• Test module data: accounts, questions, assignments, attempts, answers, scores, and reviews.
• Optional AI inputs: table names, column names, dependencies, workflow state, and sample table data submitted for analysis.

3. How We Use Information

We use information to provide database learning workflows, store local progress, authenticate Test module users, authorize role-based access, save tests and attempts, run optional AI-assisted analysis, export user-requested outputs, diagnose errors, and protect the Service from misuse.

4. Local-First Storage

Many QueryCraft features store data directly in your browser using localStorage or sessionStorage. This may include account details, workspace state, history, preferences, diagrams, generated tables, and learning artifacts.

Local browser data stays on the device and browser profile where it was created unless you export it, import it elsewhere, synchronize it through browser or operating system features, or submit it to a server-backed feature.

5. Cookies and Browser Storage

QueryCraft uses essential browser storage and cookies for local account sessions, user-scoped workspace persistence, preferences, Test module authentication, and test workflow continuity.

QueryCraft does not intentionally use advertising cookies. Analytics, monitoring, or hosting logs may depend on the deployment environment.

6. AI Services Disclosure

If the optional AI-assisted normalization feature is enabled and you choose to use it, QueryCraft may send selected schema, dependency, workflow, and sample data to the configured AI provider. Do not submit sensitive, confidential, proprietary, regulated, or credential-like data to this feature unless your deployment is approved for that use.

7. Data Security

QueryCraft includes security measures appropriate to its local-first educational design. No system can guarantee absolute security, and browser storage can be exposed if your device, browser profile, extensions, or operating system are compromised.

• Workspace data is scoped by user-specific browser storage keys.
• Test module features may use server-signed session tokens and HTTP-only cookies.
• Protected Test module routes may enforce role-based access for administrators, teachers, and students.
• SQL sandbox execution is designed for in-browser SQLite practice rather than direct production database access.

8. Data Sharing

We do not sell your personal information. Information may be shared with authorized administrators or teachers, service providers, configured database providers, AI providers when you intentionally use AI features, or when required by law, policy, security investigation, or to protect rights and safety.

9. Data Retention

Local account and workspace data remain in browser storage until you delete the account, clear site data, reset the browser profile, or remove the data manually. Test module data remains in the configured database until removed by an administrator, retention policy, or database maintenance process.

10. Your Choices and Rights

Depending on your deployment and applicable law, you may be able to view, update, export, import, or delete local accounts and local workspace data; clear browser storage and cookies; request access, correction, or deletion of Test module account data; and avoid optional AI features.

11. Children's Privacy

QueryCraft is intended for students, teachers, administrators, and learners using the Service in permitted educational contexts. If a deployment is used by minors, the responsible institution, teacher, parent, guardian, or administrator must ensure compliance with applicable consent, privacy, and education laws.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised last updated date. Continued use of QueryCraft after changes are posted means you accept the updated policy.