Privacy Policy
Last Updated: September 18, 2025
mentor.sh ("Company," "we," "our," "us") values your privacy. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website, https://mentor.sh (the "Site"), and use our services (collectively, the "Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy.
1. Information We Collect
a. Visitor Data
When you visit our Site, we may collect certain information automatically, including:
- IP Addresses: To diagnose server issues and administer our Site.
- Cookies and Web Beacons: To enhance your browsing experience, track user engagement, and improve Site content and flow.
b. Information You Provide
When you register for an account or interact with our Services, we may collect:
- Personal Information: Name, company name, address, email address, and telephone number.
- Communication Data: Information you provide when contacting us directly, including the contents of messages and attachments.
2. Use of Information
We use the collected information to:
- Provide and Maintain Services: Ensure the effective delivery of our Services.
- Improve and Personalize Experience: Customize content and enhance user engagement.
- Communicate: Send updates, respond to inquiries, and provide customer support.
- Process Transactions: Facilitate payments and prevent fraud.
- Analyze Usage: Understand how users interact with our Services to improve functionality.
3. Data Deletion Requests
You have the right to request the deletion of your personal data. To initiate this process:
- Email: Send a request to support@mentor.sh with the subject line "Data Deletion Request," including your full name, email address associated with your account, and a brief description of the data you'd like deleted.
- Support Request: Submit a support request via our platform, specifying the data you'd like to delete.
Upon receiving your request, we will verify your identity and process the deletion within 30 days, unless retention is required by law.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Enhance User Experience: Remember user preferences and settings.
- Analyze Traffic: Monitor Site usage and performance.
- Target Content: Deliver relevant content and advertisements.
You can control cookie settings through your browser. Disabling cookies may affect the functionality of our Services.
Google Analytics 4 and Google Signals
We use Google Analytics 4 to understand how users interact with our website. This service collects information such as:
- Usage Data: Pages visited, time spent on pages, bounce rates, and user interactions
- Device Information: Browser type, operating system, screen resolution, and device type
- Location Data: Approximate geographic location based on IP address
- Demographics: Age and gender information (when available and consented to)
Google Signals: When you consent to marketing cookies, we enable Google Signals, which allows Google Analytics to:
- Provide aggregated demographic and interest data from users who have turned on Ads Personalization
- Enable cross-device reporting by associating your activity with your Google account (if signed in)
- Support audience sharing with linked Google Ads accounts for remarketing purposes
- Provide enhanced insights about user behavior across devices
User-ID Tracking: For signed-in users who consent to marketing cookies, we implement User-ID tracking to:
- Connect user sessions across devices for a more complete view of user journeys
- Provide more accurate user counts and better insights into user behavior
- Enable advanced analytics features like cross-device conversion tracking
Your Controls:
- You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
- You can control ads personalization in your Google Ads Settings
- You can manage your activity data in My Activity
- Our consent manager allows you to selectively enable/disable analytics and marketing cookies
Data Retention: Google Analytics data is automatically deleted after 26 months. We may retain aggregated, non-personally identifiable data for longer periods for statistical analysis.
Microsoft Clarity
We use Microsoft Clarity (Project ID: tctkicf2pt) to understand how users interact with our website through session recordings and heatmaps. This service collects information such as:
- Session Recordings: Mouse movements, clicks, scrolls, and keyboard interactions (excluding sensitive data like passwords)
- Heatmaps: Aggregated click and scroll patterns to understand user behavior
- User Journey Analysis: How users navigate through our website
- Performance Metrics: Page load times and interaction responsiveness
Privacy Protections:
- Clarity automatically masks sensitive information like email addresses, phone numbers, and payment data
- Session recordings do not capture personally identifiable information in form fields
- IP addresses are anonymized for privacy protection
- Only activates when you consent to analytics cookies through our consent manager
Your Controls:
- You can withdraw consent for Clarity at any time through our consent manager
- Clarity will automatically stop recording and remove tracking scripts when consent is withdrawn
- You can learn more about Clarity's privacy practices in Microsoft's Privacy Statement
Data Retention: Microsoft Clarity retains session data for up to 30 days, after which it is automatically deleted. We do not store or have access to individual session recordings.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure.
6. Third-Party Services
We may employ third-party companies and individuals to facilitate our Services, provide services on our behalf, or assist us in analyzing how our Services are used. These third parties have access to your personal data only to perform these tasks and are obligated not to disclose or use it for any other purpose.
Key Third-Party Services:
Google Analytics & Google Signals:
- Provider: Google LLC
- Purpose: Website analytics, user behavior analysis, and demographic insights
- Legal Basis: Legitimate interest (analytics) and consent (marketing/personalization features)
- Data Processed: Usage patterns, device information, demographics (when consented)
- Privacy Policy: Google Privacy Policy
Meta Pixel (Facebook Pixel):
- Provider: Meta Platforms, Inc.
- Pixel ID: 1511574020264720
- Purpose: Website analytics, conversion tracking, and audience building for advertising
- Legal Basis: Consent (marketing/advertising features)
- Data Processed: Website interactions, conversion events, custom audiences
- Privacy Policy: Meta Privacy Policy
LinkedIn Insight Tag:
- Provider: LinkedIn Corporation
- Partner ID: 8706001
- Purpose: Website analytics, conversion tracking, and professional audience insights
- Legal Basis: Consent (marketing/advertising features)
- Data Processed: Website interactions, conversion events, professional demographics
- Privacy Policy: LinkedIn Privacy Policy
Microsoft Clarity:
- Provider: Microsoft Corporation
- Project ID: tctkicf2pt
- Purpose: User session recording, heatmap analytics, and user experience optimization
- Legal Basis: Consent (analytics features)
- Data Processed: Mouse movements, clicks, scrolls, page interactions, and aggregated usage patterns
- Privacy Policy: Microsoft Privacy Statement
Sentry:
- Provider: Sentry.io
- Purpose: Error tracking, performance monitoring, and technical issue identification
- Data Processed: Session duration, user interactions, technical errors, and performance metrics
- Legal Basis: Legitimate interest in maintaining service quality
Payment Processing:
- Providers: Stripe, PayPal, and other payment processors
- Purpose: Process payments and prevent fraud
- Data Processed: Payment information, transaction details
- Legal Basis: Contract performance and legal compliance
7. Advertising Features and Remarketing Compliance
When you consent to marketing cookies, we enable various advertising tracking features, including:
Google Advertising Features:
- Google Signals: Enhanced demographic and interest reporting
- Remarketing: Ability to show relevant ads to previous visitors
- Demographics and Interest Reports: Insights about user age, gender, and interests
- Cross-device tracking: Understanding user behavior across multiple devices
Meta Pixel Advertising Features:
- Conversion Tracking: Track actions taken on our website after viewing Meta ads
- Custom Audiences: Create audiences based on website visitors for targeted advertising
- Lookalike Audiences: Find new customers similar to existing website visitors
- Retargeting: Show relevant ads to previous website visitors on Meta platforms
LinkedIn Insight Tag Features:
- Conversion Tracking: Measure the effectiveness of LinkedIn advertising campaigns
- Website Demographics: Understand the professional characteristics of website visitors
- Matched Audiences: Target LinkedIn ads to website visitors and similar professionals
- Lead Generation: Track form submissions and other conversion events
Compliance Statement: By enabling advertising features from Google, Meta, and LinkedIn, we acknowledge our compliance with:
- Each platform's respective Advertising Features Policy and terms of service
- Proper privacy disclosures and user consent requirements
- User rights to access and delete data through platform-specific controls
- Industry best practices for data collection and advertising compliance
Sensitive Categories: We do not target or collect data related to sensitive categories including health conditions, financial hardship, or other protected characteristics as defined by advertising platform policies.
User Rights: You have the right to:
- Opt out of personalized ads through Google Ads Settings
- View and delete your activity data in My Activity
- Control Meta ad preferences in Facebook Ad Preferences
- Manage LinkedIn ad settings in LinkedIn Ad Preferences
- Withdraw consent for marketing cookies at any time through our consent manager
8. International Data Transfers
Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Services, you consent to such transfers.
For data transfers to advertising platforms, each provider implements appropriate safeguards:
Google Analytics: Standard Contractual Clauses (SCCs), compliance with data protection regulations, regular security assessments
Meta Platforms: EU-US Data Privacy Framework participation, Standard Contractual Clauses, comprehensive data protection measures
LinkedIn: Microsoft's global data protection infrastructure, Standard Contractual Clauses, EU-US Data Privacy Framework compliance
Microsoft Clarity: Microsoft's comprehensive data protection measures, Standard Contractual Clauses, EU-US Data Privacy Framework participation, and global compliance infrastructure
9. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data, including:
- Access: Request a copy of the information we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Objection: Object to processing of your personal data under certain circumstances.
- Portability: Request transfer of your data to another service provider.
- Withdraw Consent: Withdraw consent for marketing cookies and Google Signals features at any time.
To exercise these rights, please contact us at contact@mentor.sh.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any changes by posting the new Privacy Policy on our Site. You are advised to review this Privacy Policy regularly for any changes.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at contact@mentor.sh.
By using our Services, you acknowledge that you have read and agree to this Privacy Policy.