Privacy Policy

sphinx-ci is an open-source project by Skillberg. We take your privacy seriously. Because sphinx-ci is open source, you can audit exactly how your data is handled by reviewing the source code.

Data We Collect

• •GitHub profile information — your username, email, avatar URL, and GitHub ID, obtained via GitHub OAuth during sign-in.
• •Pull request diffs — temporarily fetched and stored in our database for quiz generation and regeneration on retry.
• •Quiz answers — your responses to generated quiz questions, stored for history and analytics.
• •Anthropic API keys — your API key, encrypted at rest using AES-256-GCM before storage.

How We Use Your Data

• •Generate quiz questions from your pull request diffs using the Anthropic Claude API.
• •Post quiz results as PR comments and update commit status checks on GitHub.
• •Display quiz history and pass/fail analytics in your dashboard.

Data Storage

All data is stored in a PostgreSQL database hosted on Neon, managed through Vercel. Anthropic API keys are encrypted using AES-256-GCM before being written to the database. The encryption key is stored as a server-side environment variable and never exposed to the client.

The application is hosted on Vercel. All connections use HTTPS/TLS in transit.

Third-Party Services

sphinx-ci integrates with the following third-party services. Each has its own privacy policy governing how your data is handled once shared with them:

• •GitHub — OAuth authentication, PR comments, and status checks.
• •Anthropic (Claude) — quiz generation via your own API key.
• •Vercel — application hosting and serverless functions.
• •Neon — PostgreSQL database hosting.

For a detailed breakdown, see our Third-Party Services page.

Data Retention

• •Quiz results and answers are stored indefinitely for your history.
• •PR diffs are stored in the database to allow quiz regeneration on retry.
• •You can request deletion of your data at any time by opening a GitHub issue.

Cookies & Tracking

sphinx-ci does not use tracking or analytics cookies. The only cookies used are strictly necessary session cookies for authentication. We do not run any third-party analytics scripts, and we do not sell or share your data with advertisers.

Open Source Transparency

sphinx-ci is fully open source. You can audit exactly what data is collected and how it is processed by reviewing the source code on GitHub.

Contact

If you have questions about this privacy policy or your data, please open an issue on our GitHub repository.

Company: Skillberg — skillberg.app