Privacy Policy

Version 2026-10-04

This is a draft template written for an educational prototype, not reviewed legal advice. Have it checked by qualified counsel — and matched against what the product actually does — before relying on it for a real product or a different jurisdiction.

1. What we collect

Creating an account collects:

• Email address — used only to identify your account and let you log in.
• Password — never stored in plain text. We store a salted PBKDF2-SHA256 hash; the original password is not recoverable by us.
• Account timestamps — when your account was created and when you accepted these terms.

We do not collect your name, payment information, or any profile details beyond the above.

2. Cookies

We set one cookie, a random session identifier, strictly to keep you signed in. It is httpOnly (not readable by page scripts) and is not used for advertising, cross-site tracking, or analytics. It is deleted when you log out or expires automatically.

3. What stays on your device

Your progress through lessons, and a few interface preferences, are stored in your browser’s local storage, not sent to our servers. Clearing your browser’s site data for this app removes that progress; it is not recoverable from our side.

4. Third parties

We do not currently use any third-party analytics, advertising or tracking services in the lab.

5. How we use what we collect

Solely to operate your account: authenticating you, keeping you logged in, and enforcing these terms. We do not sell or rent your information.

6. Data retention and deletion

We keep your account until you ask us to delete it. There is no self-service “delete my account” control in the lab yet; to request deletion, use the contact method below — replace this with a real process before launch.

7. Children’s privacy

The lab is built for general educational use and does not knowingly collect personal information from young children. If this product is offered to children under the age appropriate for your jurisdiction, this section needs real compliance review (e.g. COPPA, GDPR-K) before launch.

8. Changes to this policy

We may update this policy as the lab changes. Material changes will update the version date above.

9. Contact

Questions about this policy, or to request your data or its deletion: replace this paragraph with a real support or privacy contact address before launch.