Version 2026-10-18

Privacy Policy

Draft. This document has not yet been through legal review. It describes how the product actually behaves and is published so that behaviour is disclosed, not to be relied on as final wording.

Who holds your data

The company that invited you to this assessment decides why your data is processed and for how long. Arbiter runs the assessment on their behalf. Questions about why you were assessed, or requests to see or delete your data, should go to them — we will help them answer you.

What is collected

What is not collected

We do not record your screen, your camera, or your microphone. We collect no biometric data of any kind: no facial images, no voice, no fingerprints, and no keystroke biometrics — we do not log what you type, and we do not analyse typing rhythm or cadence to identify or profile you. We measure what you paste; we do not keep it. We do not track what you do in other applications or in other browser tabs beyond noting when this tab loses focus.

No automated decisions

Software runs your code against a test suite and calculates a score, and the platform records how you worked — commands run, tests re-run, the account you write of your fix. All of it is presented to a named person at the company you applied to, and that person decides. The platform never rejects a candidate automatically: no score threshold, no telemetry pattern, and no flag causes a rejection on its own. You are not subject to a decision based solely on automated processing, and the process record exists to give your reviewer context, never to gate you.

How long it is kept

The company that invited you sets the retention period; by default your CV and everything derived from it are hard-deleted 90 days after your assessment concludes. The detailed record of your session — the saved history of your workspace, the raw record of commands and saves and, where you used it, the in-workspace assistant transcript — is deleted 7 days after a decision closes your application or the position closes, and in any case within 30 days of your assessment ending; your score, your final code and the decision stay for the retention period. Your code and CV are deleted at the end of the retention period, and everything that identifies you — your name, your email address, your code — is deleted completely if that company stops using this platform. What can remain afterwards is a fully anonymised statistic: that an exercise was attempted, scored, and took a certain time — with nothing in it that is or can be connected to you. We keep that only to check our exercises stay fair over time.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, object to its processing, or receive a copy. That includes the results of your own assessment: the score, the breakdown of how it was reached, and the record of your session are about you, and you can request a copy of them. Contact the company that invited you. If you cannot reach them, contact us and we will help.

sha256 3f3ed8edae0840cfc768a1d259421756… · this hash is recorded against every acceptance, so we can always show exactly which wording somebody was given.