Privacy
Everything written here is implemented. There are no promises without a mechanism behind them.
What is stored
- An email address and a name. Guest accounts get a generated address on an undeliverable domain and the name “Guest” — no real personal data is collected from them.
- A password hash (bcrypt), never the password.
- Learning data: course enrolment, lesson progress, assessment attempts and the answers submitted, and applied-practice attempts and their scores.
- Certificates: serial, issue date, score, and the objectives demonstrated.
What is not stored
- No IP addresses and no access logs created by this application.
- No third-party tracking on learner pages, ever. Learning data is rows in this project’s own database, which is the whole ownership argument.
- No payment data: no payment provider is active in this build.
Retention
Guest accounts and all their data are deleted after 7 days. The purge runs whenever a new guest is created, so the event that produces the data is the event that clears the expired data.
The counts can be checked directly
Your rights
Deletion is a real delete, not a deactivation flag: every table holding learner data cascades from the account, and a test prevents adding one that does not.
Contact
This is a self-initiated demonstration platform, not a commercial product. For questions, see the public repository.