Privacy

What happens to your data

Last updated 25 August 2026

Where it lives

Everything you put into this site is stored in a database on the server that runs it, operated by the person who deployed it. It is not sent to any analytics service, advertising network or third-party host. There are no tracking cookies; the only cookie set is the one that keeps you signed in.

Who can read it

Every item you create is private to you by default. Sharing it with another person on this deployment is something you do deliberately, item by item. The person who administers the deployment has database access, as the operator of any self-hosted system does.

Artificial intelligence

AI access is a separate setting from sharing, and it is off by default. Nothing is sent to an AI provider unless the item's own AI setting allows it. When it is allowed, the request goes to the provider configured by the operator — currently DeepSeek and OpenAI — using the operator's own API key. Those providers receive the text of the material you allowed and nothing else. You can see every AI call that has been made, and what it cost, on the AI usage screen.

Uploaded files and email

Files you upload are stored on the same server, outside the public web root, and are served only to signed-in people who may see them. If email is configured, the site sends: sign-in and password-reset messages, notifications you asked for, and — if you enable it — a weekly copy of your own work to your own address.

Certificates

If a certificate is issued to you, its serial can be checked on a public page by anyone holding that serial. That page shows the name on the certificate, the course, and the dates. It shows nothing else about you, and there is no way to list or browse certificates.

Getting your data out, and deleting it

You can export everything you have created as ordinary Markdown files at any time, from Settings. Ask the operator to delete your account and it is deleted, along with what you created.

Backups

The database is backed up nightly to the same hosting account, and older backups are removed automatically. Deleted material may persist in a backup until it ages out.