Legal

Privacy Policy

Last updated: August 25, 2026

1. Who we are

youhave48hours.com is an independent platform for paid 48-hour UI design competitions. For privacy questions, contact support@youhave48hours.com.

2. What we collect

When you sign in via Google or GitHub OAuth we receive your:

Email address
Display name
OAuth provider user ID

When you enter a challenge we also store:

A payment confirmation reference from Dodo Payments (payment ID only — we never see, store, or have access to your card number, billing address, or any other payment details).
Your project submission (name, URL, description, pitch, demo links).

We also collect standard server logs (IP address, browser, pages visited) for security and debugging.

3. How we use your data

To authenticate you and maintain your session.
To process challenge entry and link it to your confirmed payment.
To run the AI judging pipeline against your submission.
To send transactional emails (entry confirmation, challenge start, reminders, results, winner notification).
To display your project name and scorecard publicly after a challenge completes.

We do not sell your data, send marketing emails, or use your data for advertising.

4. What is made public

Once a challenge is completed and a winner is announced, the following are visible to anyone on the scorecards page:

Your project name and URL
Your display name or X handle (if provided)
Your AI scorecard (scores and feedback)

During judging (before results are published), builder identities are hidden from the public scorecards view.

5. Third-party services

Dodo Payments — Payment processing (Merchant of Record). Handles checkout, payment data, tax compliance, and refunds. We receive only a payment confirmation ID — no card details ever reach our servers.https://dodopayments.com/privacy

Supabase — Database and authenticationhttps://supabase.com/privacy

Resend — Transactional email deliveryhttps://resend.com/privacy

AWS — AI judging (Bedrock — Claude for scoring, Titan for embeddings)https://aws.amazon.com/privacy/

Vercel — Hosting and edge networkhttps://vercel.com/legal/privacy-policy

Upstash — Rate limiting and job scheduling (QStash)https://upstash.com/privacy

Firecrawl — Web scraping of submitted project URLs at judging timehttps://firecrawl.dev/privacy

6. Data retention

Your account and submission data are retained for as long as your account exists. Challenge scorecards are kept indefinitely as part of the public record. You may request deletion of your account and personal data at any time by emailing us — we will action it within 30 days.

7. Cookies & sessions

We use a single session cookie to keep you signed in. We do not use tracking cookies or third-party analytics cookies.

8. Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email support@youhave48hours.com.

9. Changes

We may update this policy from time to time. The "last updated" date at the top reflects when changes were last made. Continued use of the Platform after changes are posted constitutes acceptance.