Privacy

Your account. An email address, and a name if you give one. If you sign in with Google we receive your email address and name from Google; we never receive your Google password.

Your learning. The goal you set and the answers you gave while setting it, your answers to skill checks, the work you submit, the marks and comments that work receives, and when your sessions happened. This is the product — without it there is nothing to show you.

Nothing else. We never ask where you are, we do not build an advertising profile, and we do not buy or sell data about you. The one exception is worth stating rather than burying: if you allow the analytics cookie below, PostHog works out roughly where a visit came from the way every site does, from the connection it arrived on. That is the only sense in which anything here knows where you are, and it stops the moment you say no.

All set by this site. None for advertising, and none of them tells anyone else where you have been.

Seven that need no permission. Each is doing a job you asked for, and removing it breaks the thing you were trying to do.

• Sign-in. Keeps you signed in between pages.
• Theme. Remembers whether you chose light or dark.
• Skill check progress. Lets an anonymous check survive a reload, and lets the result follow you into an account if you make one. It holds your answers to that check and nothing else.
• Currency. Remembers which currency you asked to see prices in.
• Invite. Set only if you arrive through somebody else’s invite link, so that if you sign up later they get the credit they were promised. It holds their code, not anything about you, and it is deleted the moment you make an account.
• Banner snooze. Set only if you close the “confirm your email” banner, so it stays closed for a week.
• Your answer to the question below. Yes or no, nothing else. We keep it so we only have to ask once.

And one we ask about. Analytics is the only thing here stored for our benefit rather than yours, so it is the only thing we ask for. If you allow it, PostHog keeps one cookie holding a random id — not your name, not your email. If you say no, or if you have not answered, it is never set, and the code that would set it is never even downloaded.

We count page views and clicks, and we record a replay of the visit — where the pointer went, what was clicked, where somebody scrolled back and gave up. It is how we find the screen that loses people, which is not a thing anyone reports to us.

What a replay never contains. Anything you type is blanked out before it leaves your browser — every field, on every page, including the work you hand in and anything you say to the tutor. So is all the text on every signed-in screen: a replay of a lesson, a submission or its marking shows the shape of the page and where you moved, and not one word of what was on it. The public pages are recorded as they look, because everything on them is already public.

Changing your mind. Below, whenever you like. Saying no deletes the cookie in the same breath rather than merely stopping there from being more of it.

Nothing is stored on your device, no replay is made, and PostHog never hears from your browser at all.

We do still keep our own count of things that happen to an account on our servers — a session finished, a mark returned, a limit reached. That is our record of our own service rather than anything kept on your machine, it follows you nowhere else, and no advertiser ever sees it. We would rather say so plainly than let you find out that “no” had meant less than it sounded.

Five companies, each for one job. None of them is an advertiser.

• Anthropic — the work you submit and the messages you send the tutor are sent to Anthropic’s API to be marked or answered. This is how the product works; there is no version of it that does not do this.
• Resend — your email address, so we can send you email.
• Google — only if you choose to sign in with Google.
• Inngest — schedules the background work that marks a submission after you hand it in.
• PostHog — how the site is used: pages, clicks, and the replay described above. Only from your browser, and only if you allowed it. It goes to their European servers.

Nobody else, and nothing is sold. If that ever changes, this page changes first and the date at the bottom moves with it.

Email us and we will do it. There is no self-serve button for either yet, so we are saying plainly that it is a person doing it rather than implying an automatic process that does not exist.

A copy comes back as a JSON file with everything above in it. Deletion removes your account and the learning record attached to it, and it cannot be undone.

While your account exists, and until you ask us to delete it. Work you submitted is kept because it is the evidence behind a claim on your record — a mark with no artefact attached is exactly the kind of unbacked progress this product exists to avoid.

This page was last updated on 17 August 2026. If we change what we do, we change this page first.