~/coding-prodigies $ cat PRIVACY.md

Privacy Policy

Last updated: August 22, 2026

1. What We Collect

When you create an account, we collect your name, email address, and a securely hashed password. We do not store your password in plain text.

As you use the Service, we may collect and store information associated with your account, including the courses and subscriptions you purchase, amounts paid, lesson completion progress, exam attempts and scores, certificates you earn, code you submit and run through lesson exercises, reviews you leave on courses, and messages you send through the Contact page.

We also automatically collect your IP address for security purposes, such as rate-limiting login attempts and helping prevent unauthorized access. We use a session cookie to keep you logged in and a CSRF token cookie to protect forms from cross-site request forgery. These cookies are necessary for the Service to function and are not used for advertising or cross-site tracking.

2. How We Use Your Information

  • To create and operate your account, provide the Service, track your course progress, and issue certificates
  • To process payments, maintain purchase records, and help prevent fraud and unauthorized transactions
  • To send transactional and service-related emails you would reasonably expect, such as password-reset, account-verification, and contact-form emails
  • To operate the referral and coupon systems, including tracking referrals and coupon redemptions
  • To respond to and manage messages you send through the Contact page
  • To maintain the security, integrity, and functionality of the Service and investigate misuse or violations of our Terms of Service
  • To comply with applicable legal, tax, accounting, and regulatory obligations

We do not send marketing emails unless you separately opt in where we clearly offer that option. You can withdraw your marketing consent at any time using the unsubscribe mechanism provided in a marketing email.

3. Who We Share Your Information With

We do not sell your personal information. We share information with third-party service providers only as reasonably necessary to operate, secure, and provide the Service, including:

  • Stripe — processes payments on our behalf. We do not receive or store your full payment card number; payment card information is handled directly by Stripe.
  • Judge0 — provides code-execution infrastructure for hands-on lesson exercises. When you run code through an exercise, the code you submit and information necessary to execute it may be transmitted to Judge0's sandboxed servers. The resulting output may also be returned to the Service.
  • SendGrid — provides email delivery services for password-reset, account-verification, contact-form, and other transactional emails.

We may also disclose information when reasonably necessary to comply with applicable law, legal process, or a valid governmental request; protect our rights, property, or safety; investigate fraud or abuse; or protect the security of the Service and its users.

4. Public Information

If you leave a course review, your first name, star rating, and comment may be displayed publicly on that course's page.

Certificates are publicly verifiable using their verification code. A certificate verification page may display the relevant course and completion date so that a third party, such as an employer, can verify the certificate. It does not display your email address or other private account information.

5. Your Privacy Rights and Choices

You can update your name and email address or change your password at any time through Account Settings.

You can also permanently delete your account through Account Settings. Deleting your account removes your account-associated progress, certificates, and reviews and cancels any active subscription, subject to the retention requirements described below.

Depending on where you live and applicable law, you may also have rights concerning your personal information, including the right to request access to, correction of, deletion of, or a copy of certain personal information we hold about you, and the right to object to or restrict certain processing. You may exercise applicable rights by contacting us through the Contact page. We may need to verify your identity before completing certain requests.

Where applicable law gives you a right to appeal our decision regarding a privacy request, you may do so by contacting us through the Contact page.

6. Data Retention

We retain your account information for as long as your account remains active or as reasonably necessary to provide the Service.

If you delete your account, we will delete or de-identify your personal information within a reasonable period, subject to information we are required or permitted to retain for purposes such as tax, accounting, fraud prevention, dispute resolution, legal compliance, or the establishment, exercise, or defense of legal claims.

Information that has been made public, such as a course review or certificate verification record, may require additional steps to remove or may be retained in a limited form where necessary to maintain the integrity of records or comply with legal obligations.

7. Security

We use reasonable technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, or alteration. Passwords are securely hashed and are not stored in plain text. Payment card information is handled by Stripe rather than stored on our systems, and administrative functions are restricted to accounts that have been explicitly granted administrative access.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us through the Contact page so that we can investigate and take appropriate action.

9. International Users

Your information may be processed and stored by us and our service providers in countries other than the country in which you live. Those countries may have data-protection laws that differ from the laws in your jurisdiction.

If applicable law requires specific safeguards for transferring personal information across borders, we will use the safeguards required by that law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or applicable legal requirements. When we make changes, we will update the “Last updated” date at the top of this policy. Your continued use of the Service after an updated policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

11. Contact

Questions about this Privacy Policy or requests concerning your personal information? Contact us.