1. Overview and Single Purpose

DSASync operates under Google Chrome's Single Purpose Policy. The sole purpose of DSASync is to allow users to automatically format, document, and push their completed coding solutions from supported platforms (LeetCode, CodeChef, Codeforces, GeeksforGeeks, HackerRank, InterviewBit) to their own personal GitHub repository.

2. Data We Collect and Why

• Account Information: When registering for an account on the DSASync web dashboard, we store your chosen username and cryptographically salted, hashed passwords (via bcrypt). We never store plaintext passwords.
• GitHub OAuth Tokens: To push solutions to your chosen repository, DSASync requests authorized OAuth access through GitHub. All tokens are encrypted at rest using AES-256-GCM encryption in our database and decrypted transiently in memory only during active push operations. DSASync never accesses or modifies repositories other than the specific target repository selected by the user.
• Problem Metadata and Solutions: When you submit a solution or trigger a sync, DSASync parses the problem title, problem URL, programming language, and the code content of that specific active problem tab. This data is used solely to generate structured markdown documentation and source code files in your GitHub repository.
• Local Browser Storage: The extension uses chrome.storage.local to securely store your session JWT token, auto-sync preference, and temporary offline retry queues locally on your machine.

3. Permissions Justification

• storage: Used strictly to save the user's authentication token and local preferences on their device without querying external cookies.
• activeTab: Used only when the user opens the extension popup to identify whether the active browser tab contains a supported coding platform.
• scripting: Used exclusively to read the completed submission code from in-memory code editor models (such as Monaco, Ace, and CodeMirror), ensuring full code capture without DOM virtualization truncation.
• Host Permissions: Used to communicate with the secure DSASync backend API (https://dsasync.onrender.com/*) and to extract submission status on supported problem domains.

4. Data Sharing and Third Parties

We do not sell, rent, lease, or share your personal data, source code, or account information with any advertising platforms, third-party data brokers, or external analytics services.

5. Data Retention and Account Deletion

You have full control over your data. At any time, you can navigate to the DSASync Dashboard Settings and click "Delete Account & Data". This permanently purges your user profile, stored solutions, queued items, and encrypted GitHub tokens from our database with zero retention.

6. Security

All network communications between the browser extension, web dashboard, and server take place over secure TLS/HTTPS encryption. Database connections are enforced with SSL encryption.

7. Contact and Support

If you have any questions regarding this Privacy Policy or wish to request data assistance, please submit an issue or inquiry via our official GitHub repository: https://github.com/tanmay9783/DSASync.