Skip to main content

Privacy Policy

Last updated: 2026-07-11

Summary

Claudemy.org is a non-profit education project. No ads, no selling of personal data. Reading lessons does not require an account. If you create an account (to track progress and rate lessons), we collect the minimum data needed for those features to work.

1. Data we collect

Anonymous visitors

  • Google Analytics 4: aggregate metrics (page view, session, country-level region). IP anonymized by default. Default-denied until you accept via the cookie banner.
  • Local reading progress: stored in browser localStorage (namespace `claudemy:anon:*`), never sent to a server.

Account holders

  • Email address (required — for magic-link sign-in and account-related contact).
  • Display name + avatar (only when signing in with Google OAuth — provided by Google).
  • Preferred locale (`locale_pref`) so emails come in the right language.
  • Per-lesson progress (lesson_id, reading/completed status, timestamps).
  • Per-lesson 👍 ratings (lesson_id, timestamp).
  • Authentication audit log (sign-in / sign-out / delete events, IP, user agent), retained 90 days for abuse detection.

Ask AI questions (guests and accounts)

  • Question text, locale, outcome (answered / refused / error), which AI provider served it, and response latency — tied to your account if signed in, or to a salted SHA-256 hash of your IP address if you are a guest. The raw IP address is never stored.
  • If signed in: your Ask AI question/answer history is saved to your account (visible only to you).
  • Repeated questions are stored in a shared answer cache (with no personal identifier attached) so an identical question does not trigger a new AI call.

We do NOT collect: session-level reading history, phone numbers, addresses, exact dates of birth, payment-card data (the product is free, no payments).

2. Why we collect it

  • Secure sign-in (magic link / OAuth).
  • Sync learning progress across devices.
  • Show community signal (count of "found this helpful") — only displayed once the lesson reaches ≥ 5 ratings, protecting individual privacy.
  • Detect and prevent abuse (rate limiting, audit log).

3. Where it is stored

  • Cloudflare D1 (managed SQLite) in the Asia-Pacific region (Hong Kong) — closest to our Asia-Pacific users.
  • Weekly backups exported to Cloudflare R2 in the same region, encrypted at rest, auto-pruned after 90 days.
  • Passwords are NOT stored (we do not use passwords). Magic-link tokens are one-time random strings, expire after 10 minutes.

4. Third parties (subprocessors)

  • Cloudflare — infrastructure (Workers, D1, R2). EU SCC DPA applies.
  • Resend — magic-link email delivery. Stores recipient address + email body (system templates) up to 30 days, then auto-purges. DPA signed.
  • Google OAuth — only when you choose to sign in with Google. We receive: Google id, email, name, avatar. We do not request access tokens to other data.
  • Cloudflare Turnstile — bot-protection CAPTCHA on the sign-in form. No biometrics, no cross-site tracking.
  • Google Analytics 4 — only runs if you accept via the cookie banner. Default denied.
  • Google Gemini API — only when you use Ask AI. Your question text and relevant curriculum excerpts are sent to generate an answer (primary provider). We do not send your account email or name.
  • Z.ai (GLM) — same purpose as Gemini, used only as an automatic fallback when Gemini is unavailable or rate-limited.

5. Retention

  • Active account data: kept until you request deletion.
  • On account deletion: email, name, avatar, and OAuth tokens are erased immediately from the database, and active sessions are revoked. Ratings are anonymized (de-linked from user_id) and retained as community signal. Deletion is currently irreversible; a grace-period mechanism is planned for a future release.
  • Audit log: 90 days.
  • D1 backups: 90 days.
  • Ask AI logs (question, outcome, provider, latency): kept for operations and abuse prevention; not yet on an automatic deletion schedule. Your own Ask AI history (if signed in) is deleted immediately when you delete your account.

6. Your rights

  • Access / Export — download all your data as JSON from the Account page.
  • Correct — update name, locale, avatar in account settings.
  • Delete — remove your account completely from the account page (see section 5).
  • Complaint — contact us (see section 9). You may also contact your local data protection authority.

7. Cookies

  • Necessary — Authentication (only when signed in): HttpOnly + Secure cookie that holds your session. No tracking. Cannot be disabled while signed in; sign-out clears it.
  • Necessary — Ask AI verification (guests using Ask AI only): HttpOnly cookie recording that you passed the Turnstile challenge, expiring after 30 minutes, so you are not re-challenged on every question. No tracking.
  • Analytics (optional): Google Analytics 4. Default denied. Opt-in via the banner.

8. Children

Account features are for users 16 years or older. By signing up you confirm you meet this age requirement (see Terms of Service). If we discover an account belongs to someone under 16, it will be deleted.

9. Contact

For any privacy inquiries: privacy@claudemy.org. We respond within 30 days.

10. Policy updates

For material changes we update the "Last updated" date above and email account holders a notice.

See Terms of Service →