Privacy Policy

What's stored, and why

When you sign up, you authenticate through Google or GitHub. We don't store your password—we never even see it. What we do receive is your name, email address, and profile photo. That's it. We use this to create your account and show your name on things like the leaderboard.

If you subscribe to a paid plan, payments are handled entirely by Stripe. Your card number never touches our servers. Stripe shares with us only what we need: a customer ID, your subscription status, and invoice records so we can show you your billing history.

If you sign up for the newsletter, your email goes to Kit (ConvertKit), which handles delivery. Every email has an unsubscribe link. One click and you're out. No hard feelings.

Analytics

We use Google Analytics to understand which pages people visit, how they found us, and what devices they're using. This data is aggregated and anonymous. I can't see you specifically—I can see that 40 people read the memory management chapter last Tuesday. That helps me know what to write next.

If you think this is something we shouldn't be doing, or if you have concerns about it, please reach out, given the concern, afforably, I am willing to build a custom analytics solution for this.

Google Analytics uses cookies to do this. You can opt out by installing the Google Analytics Opt-out Add-on, or by adjusting your browser's cookie settings.

Cookies

We use cookies for two things: keeping you logged in (session cookies) and analytics (Google Analytics cookies). That's the full list. No tracking pixels following you around the internet, no advertising cookies, no third-party ad networks. If you block cookies, the site will still work—you'll just need to log in each time.

Your notes and progress

Any notes you take on lessons, your completion progress, and your lab work are stored in our database. This data belongs to you. If you want it exported or deleted, just reach out and I'll take care of it.

Where your data lives

The application runs on infrastructure provided by DigitalOcean. Your data is stored on servers in the United States. We use standard security practices—encrypted connections (TLS), hashed credentials, and access controls—to keep things safe. If you're building systems, you probably know what those mean. If not, we have a book for that.

Third-party services, at a glance

Here's every external service that touches your data, and what they see:

Each of these services has their own privacy policy. I chose them because they're reputable, widely used, and I trust them with my own data too.

Your rights

You can ask to see what data we have about you. You can ask us to delete it. You can ask us to export it. You can unsubscribe from emails. You can close your account. None of this requires a lawyer or a formal request—just send me a message.

Changes to this policy

If anything here changes, I'll update this page. If it's something significant, I'll mention it in the newsletter. I'm not going to quietly change the rules on you.