Privacy
You can take the whole course without giving us any personal information. If you choose to create an account or join the email list, this page explains exactly what we store.
Without an account
- Your progress stays in your browser. Confirmed blocks, XP, streaks, badges, your security checklist and the name you type on a certificate are saved in your browser's local storage on your own device. They are not sent to us.
- Your theme choice (dark or light) is saved the same way.
Clearing your browser data, using a private window or switching device starts a new, empty chain. You can erase everything with the "Reset my progress" link on the Achievements page.
If you create an account
An account is optional. It exists so your progress follows you between devices. We store:
- Your email address and a protected form of your password. We cannot see your password. If you sign in with Google, we receive your email address and name from Google and no password.
- Your name, if you give one. It is shown on your certificates.
- Your course progress. The same information listed above: blocks confirmed, quiz scores, XP, streak, badges and which checklist boxes are ticked.
- Your email preference. Whether you asked to receive lessons and updates, and when.
- Certificates you request. Each has your chosen name, the level, the date and a verification code.
Signing in keeps a login token in your browser so you stay signed in. Signing out removes it, along with the copy of your progress in that browser.
If you join the email list
We store your email address, the page you signed up on and the date. We use it to send course lessons and updates. Every email has an unsubscribe link.
We only send marketing email to people who asked for it: by using an email sign-up box, or by ticking the box when creating an account. That box is never ticked for you.
Certificate verification
If you ask for a verification link, anyone who has that link or code can see the name on the certificate, the level and the date. Nothing else about you is shown. Deleting your account stops the link working.
The phone app
The iPhone and Android app follows the same rules as the website.
- Without an account, your progress, language, theme and reminder time are saved on your phone and not sent to us.
- Reminders are planned on your phone. We do not know when they appear.
- News and new lessons. If you switch these on, we store your phone's notification address (a push token from Apple or Google), the app's language and, if you are signed in, a link to your account. Switching them off, or deleting your account, stops them.
- The app has no analytics, no advertising and no tracking.
Invites
If you share your invite link, we store your invite code. When a friend joins with it, we record that they joined through your code and when, so you both get a streak freeze. You see only how many friends joined, never their names or email addresses.
What we never collect
- Wallet addresses, private keys or seed phrases. We will never ask for them, on this site or by email.
- Payment details. The course is free.
Analytics and cookies
We use Google Tag Manager to load measurement tools such as Google Analytics. They record which pages are viewed, roughly where visitors are (worked out from the IP address), what kind of device and browser is used, and actions in the course such as finishing a lesson or creating an account. They use cookies to tell one visit from another. The site does not pass your name, email address or password to these tools.
These tools load only if you choose Accept on the cookie notice. If you decline, they do not load and the course works exactly the same. You can change your choice at any time with the Cookie settings link at the bottom of every page.
Your choices
- See your data. The Account page shows everything we hold about you.
- Correct it. You can change your name and email preference on the Account page.
- Delete it. "Delete account" on the Account page permanently removes your account, progress and certificates straight away.
- Stop emails. Use the unsubscribe link in any email, or untick the box on the Account page.
Other companies involved
We use a small number of service providers. They process data on our behalf and only to run the site.
- Hosting (Vercel). Serves the pages and processes technical data such as your IP address, as any website host does.
- Database and login (Supabase). Stores account details and saved progress, and handles sign-in.
- Email delivery (Resend). Sends account emails such as confirmation and password-reset links and, if you joined the email list, course emails. Your email address is shared with it for that purpose only.
- Fonts (Google Fonts). Your browser requests typeface files from Google's servers.
- Push notifications (Expo). Delivers news messages to phones that switched them on. It receives the push token and the message.
- Analytics (Google). Google Tag Manager, and the measurement tools loaded through it such as Google Analytics, process the usage data described under "Analytics and cookies".
- Partners. If you follow a partner offer, the partner's site learns that you came from us, so that it can credit the referral. We do not send it your name, email address or progress.
We do not sell personal data.
Security
Passwords are stored only in hashed form by our login provider. Each account's data is protected so that one learner cannot read another's. No system is perfectly secure, so use a password you do not use anywhere else.
Children
The site is not directed at children under 16, and accounts are intended for people aged 16 or over.
Changes
If we add analytics, partner links or anything else that changes what is collected, this page will be updated first.