Privacy Policy

DesignRounds (designrounds.in) is a system design interview practice platform. This policy explains what we collect, why, who helps us process it, and how you can delete it. We don't sell your data or show ads. We use two analytics tools to understand how the site is used, and their cookies and recordings only run if you agree.

What we collect

• Account details: your email address, and the profile you choose to add: display name, target role, experience level and headline.
• Google sign-in: if you continue with Google, we receive your Google account ID, email address, whether Google has verified it, and your name. We don't receive your password or access your Gmail, contacts, Drive or anything else.
• Your practice work: the designs you build, your notes and explanations, earlier versions of a design, your conversations with the AI interviewer, extracted technical context and communication gaps, and the reviews generated for you.
• Voice answers: if you answer the interviewer by voice (a Plus feature), we store the recording, a verbatim transcript, a filler-reduced copy for technical context, and measurements of your delivery, such as speaking pace, filler words and pauses. These help inform later interviewer turns and your review. We don't use your voice to identify you.
• Security and sign-in records: one-time sign-in codes (stored only as a hash), the browser user-agent of each signed-in session, and IP addresses used for rate limiting and abuse prevention.
• Human check: Cloudflare Turnstile checks that a sign-in, the first time you open the site in a browser session while signed in, and a change of network (such as Wi-Fi to mobile data) comes from a person. Reloading the page in the same session runs the check in the background without blocking the site. We store the network address of the last successful check with your session so a different connection asks again. We receive only a pass or fail from Cloudflare. Cloudflare sees the page address, your IP address, and browser signals it uses to tell visitors from bots. This is not an advertising or analytics cookie.
• Plus early-access list: if you ask for early access to Plus, we store your email address and when you asked, and send you one confirmation. We use it only to tell you when Plus opens. Ask us to remove it at any time; deleting your account removes it too.
• Problem reports: if you report a problem, we store your email address, what you wrote, the page you were on and your browser's user agent, so we can investigate and reply. Deleting your account removes your reports.
• Usage counts: how many AI reviews and interviewer replies you've used, so plan limits can be applied.
• Site analytics: which pages are visited and key steps such as signing up, starting a round or requesting a review. See Analytics below.

How we use it

• To sign you in and keep you signed in.
• To save your designs so you can resume them on any device.
• To generate AI interviewer replies and reviews of your designs.
• To apply plan limits, prevent abuse and keep the service secure.
• To improve rounds and review quality using aggregate statistics, such as average scores per round.
• To find where the site is confusing or broken, using the analytics described below.

Analytics

We use PostHog and Microsoft Clarity to see how people move through the site, such as which pages lead to sign-ups and where people get stuck.

• Without your consent: PostHog counts page visits and key steps (signing up, starting a round, requesting a review, joining the Plus early-access list) under a random ID that lives only in the open tab. Nothing is stored on your device, and nothing is recorded.
• If you accept: PostHog and Clarity set cookies so a return visit is recognised, and record how pages are used (scrolling, clicks and page layout) so we can replay it and build heatmaps.
• What is never recorded: your designs, notes, interviewer conversations, articles you write, your profile, and anything you type into a form. Those pages are blocked or masked in recordings, and email addresses are hidden wherever they appear.
• Signed in: events are linked to your internal account ID and plan, so we can tell how many people finish a round. Your email address and name are not sent.

Recordings are kept for about 30 days and event data for up to a year. You can change your choice at any time: change my analytics choice.

Cookies and local storage

We always use the cookies needed for the site to work: a session cookie that keeps you signed in (up to 30 days), and a short-lived cookie that protects the Google sign-in step. Your browser's local storage holds preferences such as the color theme, canvas layout and your analytics choice. If you accept analytics, PostHog and Clarity also set their own cookies (see Analytics). There are no advertising cookies.

Who processes your data

We use a small number of service providers to run DesignRounds. They process data on our behalf:

• Vercel: hosts the website and API.
• Supabase: hosts our database, in the Mumbai (India) region.
• Resend: delivers sign-in codes and other account emails, such as the Plus early-access confirmation.
• Groq: converts voice answers to text. It receives the recording only, not your email address or name.
• Cloudflare: provides Turnstile, the human check on the sign-in page and the Plus early-access form.
• Google: provides Google sign-in, if you use it.
• PostHog: product analytics: page visits and key steps, and session recordings if you accept analytics.
• Microsoft Clarity: heatmaps and session recordings, only if you accept analytics.
• AI provider (currently the Google Gemini API): receives your design, notes and interview answers, including filler-reduced copies and extracted answer context, to generate replies and reviews. It does not receive your email address. Depending on the provider's terms for the service tier we use, the provider may retain or review this content to improve its services, so don't put personal or confidential information in your designs.

We may disclose information if required by law, or to protect the security of the service and its users.

How long we keep it

• Your account, designs, interview transcripts, derived answer context and reviews are kept until you delete them or your account.
• Voice recordings are deleted 30 days after they're transcribed. The transcript and delivery measurements stay with the practice round until you delete it or your account.
• Your free interviewer round is recorded against a one-way hash of your email address, not the address itself. That hash is kept after you delete your account, so the free round can't be claimed twice.
• Sign-in codes are deleted within a day, expired sessions are removed daily, and rate-limit records are removed once their time window ends.

Your choices and rights

• Access and correct: view and edit your profile at any time on your profile page.
• Delete: delete any practice round, or your whole account, from your profile. Deleting your account permanently removes your profile, designs, interview conversations and reviews from our database.
• Sign out everywhere: end all of your sessions from your profile.
• Google: you can remove DesignRounds' access at any time in your Google Account under Security, then "Third-party apps and services".

For any other request about your data, including a copy of it, email us and we'll respond within 30 days.

Security

Data is encrypted in transit (HTTPS). Session tokens and sign-in codes are stored only as hashes, and sign-in attempts are rate limited. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

Children

DesignRounds is not intended for children under 18, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above. For significant changes, we'll notify signed-in users on the site or by email.

Contact

Questions or requests: designrounds.app@gmail.com