Privacy Policy

Last updated: June 9, 2026

This Privacy Policy describes how Testver Support (“we”, “us”) collects, uses, and shares information when you use the Testver support platform (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

We collect information in three ways:

1.1 Information you give us

  • Account information — name, email address, and password (hashed with argon2id; never stored in plaintext).
  • Profile information — avatar image, bio, and any other details you choose to add to your profile.
  • Content you submit — issues you report, questions and answers you post, articles you author, and comments you add. This content may be visible to other users depending on its type and your access level.
  • Communication preferences — your notification subscriptions and email preferences.

1.2 Information we receive from third parties

  • OAuth providers — if you sign in with Google or GitHub, we receive your name, email address, and avatar URL from that provider. We do not receive your password.

1.3 Information collected automatically

  • Session data — IP address, user agent, and timestamps of your sign-in events, stored to enable session management and to help you spot unauthorized access.
  • Audit logs — administrative actions (role changes, content moderation, etc.) are recorded with the actor, action, timestamp, and IP for security and accountability.
  • Cookies — see our Cookie Policy for details on what cookies we use and why.

2. How we use your information

  • To operate the Service — authenticate you, render content, send notifications.
  • To improve the Service — analyze usage patterns and identify popular content or recurring issues (aggregated, not user-identified).
  • To communicate with you — service announcements, security alerts, and replies to support requests.
  • To protect the Service — detect abuse, enforce rate limits, prevent fraud, and respond to security incidents.

We do not sell your personal information. We do not use it for targeted advertising or share it with ad networks.

3. How we share your information

We disclose information only in these limited cases:

  • Other users — content you post publicly (questions, answers, articles, public comments) is visible to other users of the Service.
  • Service providers — we use third-party providers for hosting (Testver is hosted on Hostinger) and transactional email delivery. These providers process information only on our instructions.
  • Legal requirements — we may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Testver, our users, or others.
  • Business transfers — if Testver is acquired or merged with another company, your information may be transferred to the successor. We will notify you in advance.

4. Data retention

  • Account data and content are retained for as long as your account is active.
  • Session and refresh-token records are retained until they expire or are revoked (refresh tokens: 30 days).
  • Audit logs are retained for 12 months for security and compliance purposes.
  • When you delete your account, your profile is removed; user-generated content (issues, questions, articles you authored) may be retained in anonymized form so that conversations and references remain coherent for other users.

5. Security

We protect your data with these technical measures:

  • HTTPS is enforced for all traffic.
  • Passwords are hashed with argon2id (memory-hard, brute-force resistant).
  • Two-factor authentication (TOTP) is available and recommended for all accounts.
  • Session tokens are HttpOnly cookies with the Secure and SameSite=Lax attributes.
  • Refresh tokens are stored as SHA-256 hashes and rotate on every refresh; token reuse is detected and triggers full session revocation.
  • Database access is over a private connection between application servers and the database host.

6. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and associated data.
  • Export your content in a portable format.
  • Object to specific uses of your data.
  • Withdraw consent at any time, where consent is the basis of processing.

To exercise any of these rights, contact us at support@testver.com.

7. Children

Testver Support is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International transfers

Testver Support is operated from our hosting provider's data centers. By using the Service, you understand that your data may be processed in countries other than your own, which may have different data protection laws.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date above. If the changes are material, we will notify you via the in-app notification system or email.

10. Contact us

Questions, requests, or complaints about this Privacy Policy? Email us at support@testver.com.