Skip to main content

Privacy

TODO — this is not a privacy policy yet

What follows is a true, complete description of what this site collects, read off the database schema. It is not a legal privacy policy: it says nothing about how long we keep things, how to ask for your data back or deleted, what our lawful basis is, or which jurisdiction applies. Those need deciding, and given the course is aimed at 13–18 year olds they need deciding carefully. Write the real policy and replace this notice — don’t launch with it.

The short version: we collect what a form needs to do its job and nothing else, none of it is sold or shared with anyone, and the only thing that ever becomes public is a weight and an outcome — never a person.

What we collect, and when

  • You submit a donation request

    What
    Name, email, phone if you give one, organisation if you give one, ZIP code, what devices you have, and whether you want telling where they ended up.
    Who can see it
    The two of us who run this. Row-level security makes these rows admin-only; nobody else can read them, including other donors.

  • You request a device

    What
    Name, email, phone if you give one, ZIP code, which group you're in, and what you'd use the device for.
    Who can see it
    Admins only, same as above. Nothing about who receives a device is ever published.

  • You book a workshop

    What
    Organisation, your name and email, which format, rough audience size, city, and any dates you suggest.
    Who can see it
    Admins only.

  • You make a course account

    What
    An email address and a display name. That's the entire list — no address, no birthdate, no phone.
    Who can see it
    You, and admins. The display name appears on a certificate if you earn one.

  • You mark a lesson complete or take a quiz

    What
    Which lesson, when, and your quiz scores.
    Who can see it
    Only you. The policies restrict every row to its own user; an aggregate count of distinct learners is public, and nothing else is.

  • You earn a certificate

    What
    Your display name, which module, the date, and a random verification code.
    Who can see it
    Anyone holding the code, at /verify. The table can't be listed or searched — a code resolves to one certificate or nothing.

What we don’t do

  • No advertising, no tracking pixels, no analytics that follow you to other sites.
  • Nothing is sold or handed to a data broker. Ever.
  • No personal detail appears on the impact page. Weights and outcomes are public; the people behind them are not.
  • Course signup asks for an email and a display name only — no address, no birthdate, no phone number.

Data on the devices themselves

That’s a different question with a longer answer, and it has its own page.

What happens to your data