Privacy Policy

Last updated: June 12, 2026

At SkillBun, accessible from skillbun.tech (and its subdomains), one of our main priorities is the privacy of our visitors and users. This Privacy Policy document outlines the types of information collected and recorded by SkillBun, how we use it, and the security measures we employ to keep your personal data safe.

1. Information We Collect

We collect information to provide better services and personalized career guidance to our users. The categories of information we collect include:

• Account Information: When you register using Google Sign-In or email/password authentication, we receive your email address, display name, and profile picture URL via Firebase Authentication.
• User Profile Data: During onboarding, you provide your academic degree/program, year of study, learning interests, and target tech roles.
• Progress & Quiz Responses: We store your answers to the adaptive career quiz, assessment scores, certification progress, and completed roadmap nodes.
• System & Interaction Logs: We log queries submitted to the Bun-Bot AI Counsellor, session duration, and standard traffic data for security and performance optimization.

2. How We Use Your Information

SkillBun utilizes the collected data for the following essential purposes:

• To personalize your career recommendation outputs and build adaptive learning roadmaps.
• To power the Bun-Bot Counsellor, providing contextually relevant study suggestions and curriculum breakdowns.
• To issue, verify, and display public certifications and academic achievements.
• To detect, prevent, and mitigate fraudulent activity, bot abuse, and scraping attempts.
• To send transactional emails (e.g., password reset requests) through our secure Zoho SMTP integration.

3. Data Processing & Infrastructure

We leverage industry-leading cloud infrastructure to run our platform securely:

• Authentication: Handled by Firebase Authentication. Your passwords are encrypted and managed directly by Google/Firebase; they are never accessible to SkillBun developers or servers.
• Database Storage: Profile and learning progress data is persisted in Cloud Firestore. Security is enforced through granular Firestore Rules, ensuring that only you (the authenticated account holder) can read or modify your personal data.
• AI Capabilities: The Adaptive Quiz and Bun-Bot chat utilize server-side calls to the Google Gemini API. While we transmit prompt contexts securely, we use enterprise API layers which, under Google's data privacy policies, do not use submitted payloads to train their base models. However, you are advised not to submit highly sensitive PII in free-text fields.

4. Data Protection & Encryption

We implement robust technical controls to protect your data. All communication is encrypted in transit using standard TLS/HTTPS protocols. For content security and anti-scraping enforcement, study guides are encrypted using the proprietary SkillBun Vault (SBV1) framework, which features multi-layered cryptographic checks (including HKDF key derivation, XOR scrambling, and AES-256-GCM authenticated encryption).

5. Bot Mitigation & Cloudflare Turnstile

To defend against denial-of-service (DDoS) attacks, spam, and malicious bot activity, SkillBun integrates Cloudflare Turnstile. Turnstile is an invisible captcha/challenge mechanism that gathers browser environment indicators to verify human sessions. Interaction data collected during Turnstile checks is governed by Cloudflare’s privacy policy.

6. Cookies & Tracking Protocols

SkillBun is committed to an ad-free user experience. We strictly enforce the following rules:

• We do not sell, rent, or trade your data to third-party ad brokers or marketing networks.
• We do not integrate tracking pixels or cross-site marketing cookies.
• We only use necessary cookies or local browser storage to persist your active session, Firebase auth token, theme preferences (light/dark mode via sb_theme), and temporary quiz state.

7. Data Sovereignty & Deletion Rights

You have complete control over your personal data:

• Self-Service Deletion: You can delete your account instantly through your Profile Settings page. This action permanently deletes your Firebase account authentication record, your Firestore profile document, and all associated roadmap progress details.
• Manual Requests: If you wish to request manual deletion, verify what data we hold, or ask any privacy-related questions, you may email us at harsh@skillbun.tech.

8. Children's Privacy

SkillBun is designed for university and college technology students. We do not knowingly collect personal identifiable information from children under the age of 13. If you believe your child has provided us with personal information, please contact us immediately so we can take steps to remove it.

9. Revisions to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our service offerings, security protocols, or legal requirements. The "Last updated" date at the top of this page will indicate when the latest revisions were made. Your continued use of the platform constitutes agreement to the updated policy.

10. Contact Us

If you have any questions, concerns, or legal inquiries regarding this Privacy Policy, please contact our data protection team at: harsh@skillbun.tech