Privacy policy

Last updated 19 October 2026

BitFlow is run by NAVIEL Advanced Engineering & Technology ("we"). We collect as little as we can: there are no advertising or tracking cookies, and we never sell your data.

What we store

• Your account: your username and a salted hash of your password (never the password itself), plus an optional one-time recovery code, also stored only as a hash. We don't ask for your email or real name.
• Your work: the Verilog code you run or submit, the results (pass/fail, test output, counterexamples), your lesson progress, XP, streaks, badges and contest scores.
• Classes: if you join a class, its teachers see your username and your progress on the class's assignments.
• Share links: a design you share is readable by anyone who has the link; ask us if you want one taken down.
• Public leaderboard: your username, XP and number of solved problems.

Cookies and local storage

We set a single, strictly necessary cookie, bitflow_session, which keeps you signed in for up to a week. Your browser's local storage keeps editor drafts and panel sizes on your own device; it is never sent to us. Because nothing else is stored, there is no cookie banner.

Analytics

We count page views to see which pages are useful. Each view adds one to a daily counter for that page and the referring website's domain. We don't record your IP address, account, device or any identifier, and we don't use cookies for this. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.

The AI assistant

When you use the AI assistant or "Explain my failure", your question, your code and the relevant test results are sent to the AI provider we have configured (such as OpenAI, Google, Anthropic or Groq) to produce an answer. Nothing is sent unless you use these features. The provider handles the request under its own terms.

Server logs and security

Our servers keep short-lived technical logs (time, request path, errors) to keep the service running, and keep IP addresses in memory only briefly, for rate limiting. Traffic is encrypted with HTTPS and passwords are hashed with scrypt.

How long we keep it, and your choices

We keep your account and work until you ask us to delete them. You can change your password at any time from your profile. To get a copy of your data, or to have your account and everything linked to it deleted, contact us (below) with your username and we'll do it within 30 days.

Children

BitFlow is meant for students. If you are under 13, use it only with a parent's, guardian's or teacher's permission.

Changes

If this policy changes, we'll update the date above. Significant changes will also be announced on the site.

Contact

BitFlow is operated by NAVIEL Advanced Engineering & Technology. Contact us through our LinkedIn page.