Privacy Policy

Last updated: February 2026

What we collect

Vetted collects only what's necessary to deliver accurate skill assessments and maintain your account.

  • Account data — email address and authentication credentials (via Supabase Auth). Google OAuth users share their email only.
  • Assessment data — your answers, scores, difficulty levels, and timestamps for each assessment you take.
  • Behavioral signals — during assessments, we track tab switches, paste events, focus loss duration, and typing cadence. These signals produce your Confidence score.
  • Payment data — handled entirely by Stripe. We store your Stripe customer ID but never see or store card numbers.

Behavioral tracking (Confidence layer)

The Confidence score is central to Vetted's value. During an active assessment, we monitor:

  • Paste events (clipboard usage)
  • Tab/window visibility changes
  • Time the browser window was unfocused
  • Typing speed variance (keystroke cadence)
  • Whether text appeared instantly (possible paste without paste event)

This tracking is only active during assessments. We do not track your behavior outside of the assessment flow. No screen recording, no webcam, no keystroke logging outside the answer textarea.

How we use your data

  • Generate and evaluate assessment questions (via Google Gemini AI)
  • Calculate your skill score and Confidence rating
  • Display your dashboard, badges, and progress over time
  • Enforce free-tier assessment limits

We do not sell your data. We do not use your assessment answers to train AI models. Your answers are sent to Google Gemini for evaluation and are subject to Google's API data policies.

Data storage and security

All data is stored in Supabase (PostgreSQL) with Row-Level Security enabled — you can only access your own data. Authentication uses cookie-based sessions via @supabase/ssr, not localStorage tokens.

Public badges

When you share a badge, the badge page is publicly accessible and displays your topic, score, and Confidence level. Badge pages do not reveal your email or full assessment answers.

Account deletion

You can delete your account at any time from Settings. Deletion is permanent and cascades to all your assessments, answers, badges, and profile data.

Contact

Questions about this policy? Reach out at hello@vetted.dev.