← Home
Legal

Privacy Policy

Last updated September 16, 2026. What we collect, why, and how to see or delete it.

What we collect

Account information (name, email, and authentication data — we use passkeys and OAuth sign-in, and never see your passkey credential at all); purchase records (which certification, when, and the price paid); study activity (course progress, flashcard performance, and exam/training results, used to power your dashboard and repeat list); and, on a team seat, the progress your manager can see on the team dashboard.

What we don't do

We don't sell your data to third parties, and we don't share your study activity or exam results outside your own team's manager dashboard without your consent.

Cookies

Only first-party session cookies needed to keep you signed in — no third-party tracking or advertising cookies, and no ad network.

Where it's stored

On Cloudflare's infrastructure (Workers and D1), the same platform that serves the rest of the site.

How long we keep it

Account and study data is retained while your account is active, and for 24 months after your last certification's access window ends, unless you request deletion sooner.

Your rights

You can request a copy of your data or request its deletion at any time via our contact page. We aim to confirm deletion requests within a few business days, subject to what we're legally required to retain (such as payment records).

Privacy questions or data requests: privacy@secleaderacademy.com