Privacy Policy

This policy explains what we collect, why, and the choices you have. We aim to collect as little as we need to run the service.

What we collect

• Account data: your email, display name, and password hash (never the password itself).
• Learning data: which labs you started and completed, scores, XP, badges, streaks, and certificates.
• Operational data: session records, IP address hashes, and lab activity needed to run and secure the platform.
• Billing data: handled by our payment provider; we store a customer reference and invoice records, never full card numbers.

How we use it

To provide the labs, track your progress, enforce plan limits, detect abuse, and communicate essential account and billing information. We do not sell your data.

Support access

Our support and admin staff can, when necessary, view your profile and progress and — with an audited, time-limited impersonation — act as your account to reproduce a problem. Every such action is recorded in an audit log. Support can attach to a running lab's terminal read-only for troubleshooting; this is logged.

Your rights

You can export a copy of your data or delete your account at any time from account settings. Deletion anonymises your personal data and signs you out everywhere. For any other request, contact support.

Retention

Lab environments are deleted at the end of each session. Sessions and expired tokens are pruned on a schedule. Learning and billing records are kept while your account is active and as required for legal and accounting purposes.