o‘zing o‘rgan

Privacy policy

Version: 2026-10-12.2

This page explains, in plain words, what O‘zing o‘rgan collects, why, and how you stay in control.

In short

  • ✅ We collect only what is needed for learning.
  • 🚫 No ads, no tracking analytics, your data is never sold.
  • 💻 The code you write is not sent to our server — it runs in your browser.
  • 👶 Under 16? You join with your parent's (guardian's) consent.
  • 🗑️ You can download your data or delete your account at any time.

1. Who is responsible

The site owner is responsible for your data: [site owner not specified]. Contact: [email not specified].

2. What we collect

Data you give us

  • Account: username, first name, email and password. The password is stored only as a hash — nobody, including us, can read it.
  • Optional: an "about me" line and a profile photo (if you upload one). Photos are re-drawn on the server, which removes location (GPS) and other hidden data. Uploading a photo is not required — you can pick a ready-made avatar.
  • If you sign in with Telegram: our database keeps only your Telegram ID (so the bot can send you sign-in codes and reminders). The first time you sign in, the bot asks for your phone number: your phone number, Telegram name and @username are not written to our database — they are only sent to a private Telegram channel of the site administration to help restore your account. No email or password is required. Recovery codes are stored only as hashes.
  • Settings: language, theme, daily goal, sound and motion, leaderboard visibility.
  • Consent: when and to which policy version you agreed, and whether you are over 16 or have a parent's consent.

Data created while you learn

  • Completed lessons and when; quiz answers (which option and whether it was correct).
  • Practice results — only a "done" flag. Your code itself is never sent to the server. Code drafts are kept only on your device (browser storage).
  • Points, badges and streaks.

Technical data

  • Failed login attempts (IP address, browser type, username entered) — to protect against password guessing. They are cleared when you log in successfully. Successful logins are not logged.
  • The hosting provider may keep technical request logs for a short time.

3. What we do NOT collect

Your location, contacts, camera or microphone (the site never asks for them). No advertising or tracking services are connected. We do not sell your data.

4. Why we use it

  • To run your account and sign you in;
  • to save your learning progress, points and badges;
  • the leaderboard: your first name, avatar and points are visible to other learners (your email is not). You can turn this off in your profile;
  • security and password-reset emails.

Legal basis: your consent (Law of the Republic of Uzbekistan "On Personal Data").

5. Children

Learners under 16 register with a parent's or guardian's consent. A parent can ask at any time to see or delete their child's data — write to the address above. We recommend ready-made avatars instead of real photos for children.

6. Third parties

  • YouTube (Google): video lessons are embedded via youtube-nocookie.com. When you open the "Video" step, your browser connects to YouTube, which applies its own privacy policy. If you don't open the video, no such connection is made.
  • Hosting provider — where the site and database run.
  • Email service — only for password-reset emails.
  • Telegram: if you sign in with Telegram, confirmation messages pass through Telegram's servers. To help restore accounts, the bot leaves a short note in a private Telegram channel of the site administration: your internal number, your phone number (when you press “Share phone number”), Telegram name and @username (if any), your site nickname and the date. If evening reminders are on, the bot sends at most one reminder a day — turn it off in settings or with /stop in the bot. If you delete your account, this note is deleted on request.

Fonts and the Python and SQL engines are served from our own server — no third-party requests for them.

7. Cookies and browser storage

  • sessionid — keeps you signed in;
  • csrftoken — protects forms from forged requests;
  • django_language — your chosen language;
  • browser storage (localStorage) — your practice code drafts, on your device only.

No advertising or tracking cookies are used.

8. Where and how long

Server location: Germaniya (Oracle Cloud, Frankfurt). Data is kept until you delete your account. When you delete it, everything linked to it (lessons, answers, points, photo) is removed from the database immediately.

9. Security

Passwords are hashed, password guessing is rate-limited, the site runs over HTTPS and uploaded photos are re-processed. No system is 100% secure — if you notice anything suspicious, tell us right away.

10. Your rights

  • Access and download: the "Download my data" button on your profile.
  • Correction: in your profile settings.
  • Deletion and withdrawing consent: "Delete account" on your profile.
  • Hide from the leaderboard: profile → Privacy and security.

11. Changes

If this policy changes, the new version date is shown here and you will be asked to agree again at your next visit.