Minimal data, clear purpose.
This pilot uses browser storage for learning progress and secure cookies for access. Payment and ad features remain optional.
Information used by the library
Learning progress: participating guides save progress in your browser. It is not automatically uploaded to the access database.
Access records: voucher hashes, device-token hashes, scopes, expiration dates, redemption events, and status may be stored in Cloudflare D1. Full voucher codes are not stored in readable form.
Purchases: when checkout is enabled, the library may store the purchaser’s email, selected pass, amount, provider reference, and fulfillment status. Payment credentials are entered on the payment provider’s hosted page and are not stored by this site.
Passwordless recovery: single-use recovery tokens are stored only as cryptographic hashes with their voucher, email, purpose, creation time, and expiry. Links expire after 15 minutes and cannot restart the original pass duration.
Support: support requests may store the email, optional purchase reference, message, status, and operator notes needed to investigate access issues. Never submit card details, OTPs, passwords, or API keys.
Rewarded ads: when enabled, the ad provider may process browser, device, consent, and advertising data under its own policies. An ad pass record stores a hashed device identifier, selected course, status, and expiry.
Why the data is used
Data is used to issue and restore access, enforce device limits, prevent duplicate fulfillment, support purchases, investigate abuse, and operate the library.
Your choices
You may use free content without purchasing a pass. You may clear browser data at any time, but automatic access and locally saved guide progress can disappear. A saved recovery code or verified email link can restore eligible access. If both are unavailable, the support queue provides a manual review path.
Retention and contact
Access and purchase records may be retained for security, fulfillment, accounting, and support. This is a pilot notice and should be reviewed before enabling live payments or personalized advertising.