Privacy policy

Last updated 5 October 2026

HeadSolved records people while they solve, so we owe you a clear account of what we collect, who sees it and how long we keep it. In short: recordings exist to check results, people see them only to mark and check, and the raw footage is deleted 30 days after your result. We don't sell data, show ads or use tracking.

1. Who we are

The controller of your personal data is Teiva Jabbour, 500 4th ST NW Suite 102 #2258 Albuquerque, NM 87102, United States, who runs HeadSolved. Email hello@headsolved.com about anything in this policy.

2. What we collect

Your account

• Your email address and password (stored only as a one-way hash, never in readable form).
• Your handle and country, which are public, and when you confirmed you're 18 or over.
• Your friends, friend requests, invite link, teams and team invitations.

When you take part in a round

• Recordings from check-in to the end of your sitting: video and audio from your laptop's camera and microphone, a video of your whole screen, and video from your phone, from one side, of you, your desk and your screen. None of this if you sit a round uninvigilated.
• A photo of your ID and a scan of your room, only for rounds that ask for them.
• The photos of your write-up (including any you retake or remove), or the answer you type in a number round.
• What happens in the browser during the round: switching tabs or windows, copy and paste (that it happened, never what was copied), the screen share, camera or phone stopping, going offline, window size, and when you check in, see the problem and hand in.
• Technical details of your devices: browser and device type, how many screens are connected, your phone camera's settings, and how far each device's clock is from ours.
• Flags our system raises from that (for example "tab hidden for 2 minutes"), your marks, the verdict, and the notes graders write.
• If you sit a round uninvigilated: just your write-up photos or answer, when you opened the problem and handed in, and the AI's mark of your write-up, with its working and its feedback to you.
• The badges you earn.

Payments

Payments go through Stripe and Link, who collect your card details; we never see your full card number. We keep your membership status, the Stripe references for your subscription and purchases, a record of credits you buy and spend, and when you ticked the box asking for immediate access before paying (with the exact wording you saw).

Technical data

• Your IP address and the email address typed in, when a sign-in fails, used to slow down password guessing (kept for at most a day); and the country your IP address points to, used once to pre-fill the sign-up form.
• Short-lived server logs kept by our hosting provider to run and secure the site.

Age checks

If a grader thinks someone looks under 18, we record that, with a note. If you then email us proof of age, we look at it, record the outcome, and delete the email.

What recordings can pick up

Recordings capture whatever your camera, microphone and screen do: other people in the room, your teammates' voices in a team round, notifications that pop up, and anything else in view. Before a round, close anything private and choose a spot where others won't be recorded. We use recordings only to mark and check that sitting.

3. Why we use it, and on what basis

• Running your account and the rounds you enter, including recording, marking and checking your sittings: this is the service you sign up for (contract).
• Keeping results fair for everyone: raising flags, checking footage behind badge-worthy results, handling appeals and acting on cheating (our legitimate interest, and every entrant's, in results that can be trusted).
• Keeping HeadSolved for adults: age checks (legitimate interest, and protecting young people).
• Payments and records: taking payment and keeping accounts the law requires (contract and legal obligation).
• Security: limiting password guessing and keeping the site safe (legitimate interest).

We only email you about your account (such as password resets) and, if they come up, important changes to these terms or to prices. We don't send marketing.

We don't use facial recognition or any other biometric identification. For invigilated sittings no decision about you is made by a computer alone: our system raises flags to point a person at moments worth a look, and a person makes every mark and verdict. If you choose to sit a round uninvigilated, your write-up is marked by an AI model instead, and that mark decides whether you get a Solved badge. If you email us within 14 days of the result, a person will look at it again.

4. Who sees what

• Everyone: your handle, country and the month you joined, whether you're a member and since when, and your badges: each one's round, score, team and teammates (for team badges), and how many people earned and sat it. Never your email, your recordings, or scores that didn't earn a badge.
• Your friends: which finished rounds you took part in, your team in team rounds, and, where you earned a badge, your score and how long you took to hand in.
• Your teammates: your handle, and your team's shared write-up and mark (including a mark that didn't earn a badge).
• Our graders and admins: your recordings, photos, write-up, flags and marks, to mark and check your sitting. They're bound to keep it confidential and see only what that needs.
• Service providers who run parts of HeadSolved for us, only as we instruct: Cloudflare (hosting and storage of recordings and photos), Supabase (our database, hosted in Ireland), Resend (sending account emails), Anthropic (its Claude AI model marks uninvigilated write-ups: we send it the photos and the problem, not your name or email, under terms that don't let it train its models on them) and our email provider (messages you send us).
• Stripe and Link, who sell you membership and credits as the seller of record, and so handle your payment details under their own privacy policies. We share with them who is paying (your account ID) so the payment reaches your account.
• Anyone the law requires, if we're legally obliged to share something.

Some of these providers handle data outside the UK, including in the US. Where they do, the transfer is protected as UK law requires, for example by the UK's international data transfer agreement or addendum.

5. How long we keep it

• Recordings, ID photos, room scans, and write-up photos you retook or removed: deleted 30 days after your result (the later of the round ending and your latest mark). We keep them longer only while an age check on your account is open.
• Write-up photos, answers, marks, verdicts, notes, flags, badges and the round's activity log: while your account exists, because they are your results.
• Your account: until you close it. We then delete your email, password, handle, invite link, recordings and all photos, and take back your badges. We keep, under an anonymous ID, your marks, verdicts and notes, the rounds' activity logs and your credit and payment records, because they back other people's results (such as team badges and leaderboards) and the records the law requires.
• Payment and credit records: at least six years, as UK tax law requires.
• Password-guessing records: a day.

If an account is closed after an age check, its recordings, photos and write-up photos are deleted straight away. Backups roll over and drop deleted data within a few weeks.

6. Cookies and storage on your device

We use one cookie, which keeps you signed in for up to 30 days. It's essential for the site to work, so there's no cookie banner. During a round your browser also holds recordings and photos waiting to upload (deleted once uploaded), and your phone keeps a pairing code that only works for that sitting. The calendar remembers whether you prefer month or week view. There are no analytics, advertising or tracking cookies.

7. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to get it in a portable format. Email hello@headsolved.com from the address on your account and we'll reply within a month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd like the chance to put things right first.

8. Age

HeadSolved is only for people aged 18 and over. If we learn that an account belongs to someone under 18, we close it and delete its recordings and photos.

9. Changes

We'll update this policy when what we do changes, and email you before any change that matters. See also our terms.