Privacy Policy

In force since October 14, 2026 · Version 2026-10-14

Residents of Chile: your contract and our commercial information are in Spanish at Chile.

1. Controller

The controller of your personal data is KATANALABS SpA, RUT 78.526.528-9, registered in Providencia, Santiago Metropolitan Region, Chile. For any privacy matter, write to contact@katanalabs.pro.

2. What data we process

• Account: username, email and name (if you give one). Your password is stored only as a hash, never in plain text.
• Country of residence and contract record: the country you declare (it decides which version of the contract applies to you) and, for each time you accept the Terms, the version, language, country and date. Nothing else (no IP or device data) is stored with it.
• Lab activity: which labs you launched and solved, when, and your points and rank.
• Command history: the commands you type in each lab's terminal are saved when the session ends, on every plan. On the Business plan you can review them from your profile. The rest of the sandbox (files, processes) is destroyed when the session ends.
• Technical data: IP address and server logs, used to enforce usage limits, prevent abuse and diagnose errors.
• Support: the name, email and message you send us from the support page.
• Lab feedback (optional): the stars and comment you choose to leave after solving a lab, used only to improve the labs. They aren't shown to other users.
• Billing: if you buy a paid plan, Lemon Squeezy receives your payment details directly. We only receive your subscription status, order identifiers and the billing country you gave them, never your card number. We compare the billing country with your declared country of residence to make sure the right contract applies.

3. Why we use it and on what basis

• Providing the service (account, labs, progress, your plan, transactional emails such as welcome, password reset and payment notices): needed to perform the contract you accept when signing up.
• Security and abuse prevention (IP, logs, command history): our legitimate interest in protecting the Platform, other users and third parties.
• Support: answering your questions.
• Marketing emails: only with your consent; we don't send any today.

We don't sell your data or use it for advertising.

4. Who we share it with

Only with the providers we need to operate, processing it on our behalf:

• Google Cloud: servers, database and labs (United States, us-central1 region).
• Lemon Squeezy: charges, receipts and taxes for paid plans (United States).
• Resend: transactional email delivery (United States).
• Sentry: production error tracking, which may include technical details of the failed request (United States).

This involves an international transfer of data to the United States. We may also disclose data to an authority when the law requires it.

5. How long we keep it

• Your account data, activity and command history are kept while your account exists. Deleting your account removes them from our database.
• Support messages are kept to follow up on what you asked, even if you delete your account. You can ask us to delete them.
• Lemon Squeezy keeps billing records under its own legal obligations.
• Technical logs are kept only as long as needed for security and diagnostics.

6. Your rights

We are a Chilean company, so Chilean data protection law (Law 19,628, and Law 21,719 from December 1, 2026) governs how we process your data, alongside any other data protection law that applies to you. You can access, rectify and delete your data, object to its processing, and request its portability and blocking.

• Downloading your data and deleting your account are self-service from your profile.
• For any other right, write to contact@katanalabs.pro. We'll answer within the legal deadlines.

7. Cookies

We only use functional cookies, no tracking or advertising:

• accessToken / refreshToken: httpOnly session cookies that keep you signed in.
• username: tells the interface you're signed in without an extra request.

8. Security

Passwords are hashed, each lab runs isolated from the others and payments are processed outside our servers. If a security breach affects your data, we will notify you as the law requires.

9. Minors

You must be at least 16 to have an account, and we ask you to confirm it when you sign up. We don't knowingly process data of anyone younger: if we learn that an account belongs to someone under 16, we close it and delete its data. Paid plans require being of legal age or a legal guardian's permission.

10. Changes to this policy

If we materially change what data we process or why, we will update this page and email you before the change takes effect. See also the Terms of Service.