Who We Are
QueryCase is a SQL learning platform operated by Conor Robertson, trading as QueryCase. When this policy refers to "QueryCase", "we", "us", or "our", it means the individual or legal entity responsible for this service.
Our registered contact email is hello@querycase.com.
This policy applies to all users of querycase.com and any related services we operate.
What We Collect
We collect information that you provide to us directly and information generated automatically as you use the platform.
Information you provide
- Account details: email address, username, and password when you sign up
- Profile data: experience level, learning goals, and how you heard about us (optional onboarding questions)
- Payment details: billing information processed by Stripe (we never see or store your card number)
- Communications: messages you send us by email or through the platform
Information collected automatically
- Usage data: cases completed, XP earned, streaks, and learning progress
- Analytics events: page views, feature interactions, and session data collected via PostHog
- Device and browser data: device type (mobile or desktop), browser type, and approximate country (from your IP address at signup)
- Referral data: the URL you came from and the first page you visited, to help us understand how people find QueryCase
- Log data: server logs including IP address, timestamps, and error information
We do not collect or store your SQL query inputs. All SQL execution happens entirely in your browser using DuckDB WebAssembly and never reaches our servers.
Legal Basis for Processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under GDPR / UK GDPR:
- Contract: processing your account data and delivering the service you signed up for
- Legitimate interests: understanding how users engage with the platform, improving features, and preventing abuse
- Consent: marketing emails (only sent if you opt in)
- Legal obligation: retaining billing records as required by applicable law
If you are based in California or another jurisdiction with specific privacy laws, please see the "Your Rights" section below.
Third-Party Services
We use a small number of carefully chosen third-party services to operate QueryCase. Each has its own privacy policy and data processing terms.
Our database and authentication provider. Supabase stores your account information, learning progress, and subscription state. All data is encrypted at rest and in transit. We have a Data Processing Agreement in place with Supabase.
Our payment processor. Stripe handles all payment card data and billing information. We store only a Stripe customer ID and subscription status in our own database. We never have access to your card number or full payment details.
Our product analytics platform. PostHog records anonymised events such as page views and feature interactions to help us understand how the product is used and where to improve it. We use PostHog Cloud EU, which keeps event data in the European Union. You can opt out by disabling JavaScript or using a browser extension that blocks analytics.
Our hosting and deployment platform. Vercel serves the QueryCase application and may log request metadata including IP addresses. These logs are retained for a short period for security and debugging purposes.
We do not sell your personal data to any third party. We do not share your data with advertisers.
Payments and Subscriptions
QueryCase Pro is a paid subscription available on a monthly or annual basis. Payments are processed exclusively by Stripe. We do not store, transmit, or have access to your payment card details.
When you subscribe, Stripe provides us with a customer identifier and subscription status. We store these in your profile to gate access to Pro features. When you cancel, Stripe notifies us via webhook and we update your account status accordingly.
If you request a refund, you can contact us at hello@querycase.com within 14 days of any charge.
For subscriptions cancelled through the Stripe customer portal, cancellation reasons you provide to Stripe may be passed to us to help us understand and improve the product.
Data Retention
We retain your data for as long as your account is active. When you delete your account:
- Your profile, progress, and usage data are deleted within 30 days
- Billing records are retained for up to 7 years as required by financial regulations
- Anonymised, aggregated analytics data (not linked to you individually) may be retained indefinitely
Server logs are retained for a maximum of 90 days before automatic deletion.
International Data Transfers
QueryCase is operated from the United Kingdom. Our infrastructure providers (Supabase, Stripe, Vercel) are based in the United States. Where data is transferred outside the UK or EEA, we rely on Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA) as the legal mechanism for transfer.
PostHog analytics data is processed in the European Union by default when using PostHog Cloud EU.
Your Rights
Depending on where you live, you may have the following rights regarding your personal data. You can exercise any of these by contacting us at hello@querycase.com.
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your personal data (the "right to be forgotten")
- Portability: receive your data in a machine-readable format
- Restriction: ask us to limit how we use your data while a dispute is resolved
- Objection: object to processing based on legitimate interests
- Withdraw consent: if we are relying on your consent (e.g. for marketing), you can withdraw it at any time without affecting any prior processing
If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
If you are in the EU, you have the right to complain to your local supervisory authority.
If you are in California, you have rights under the CCPA / CPRA including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.
We will respond to all valid requests within 30 days.
Children
QueryCase is not intended for children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their personal data, please contact us at hello@querycase.com and we will delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.
Your continued use of QueryCase after any changes constitutes acceptance of the updated policy. If you do not agree with the revised policy, you should stop using the service and may request deletion of your account.
Contact Us
If you have any questions about this privacy policy or how we handle your data, please get in touch:
QueryCase
Email: hello@querycase.com
We aim to respond to all enquiries within 5 business days.