Privacy Policy
Version: native-2026.07 · Effective date: July 25, 2026
This Privacy Policy explains how personal information is collected, used, and shared when you use this course website (the "Service"). It is written to meet United States federal and state privacy requirements, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), the Texas Data Privacy and Security Act (TDPSA), and comparable state laws.
1. Who we are
This Service is operated by the institution operating this site (the "institution," "we," or "us"). The institution is the controller and business responsible for personal information collected through the Service and decides how and why that information is used.
The Service runs on KlickCourse, the platform this site runs on. KlickCourse acts as the institution's platform provider, processor, and service provider: it processes personal information only to operate the Service on the institution's behalf and under the institution's instructions, and does not use that information for its own independent purposes.
If your institution partners with a marketing or reseller agency that manages this site, that agency may also access information as an additional service provider under contract.
2. Information we collect
We collect the following categories of personal information:
- Account data — the email address and name you provide when you create an account or enroll.
- Learning records — your enrollments, lesson progress, video watch data, quiz and assessment attempts and scores, and certificates issued to you. Certificates include a public verification link so a certificate can be independently confirmed; that page shows your name, the course, and the completion date.
- Payment data — when you make a purchase, payment is processed by Stripe through its hosted checkout. We receive confirmation of payment and limited billing details, but we never store your full card number.
- Technical and usage data — your IP address, browser user-agent, the pages and courses you view, and related timestamps. We collect this for security, service integrity, and usage reporting.
- Support communications — messages you send us and our replies when you ask for help.
3. Cookies
We use only strictly-necessary, first-party cookies. We do not use advertising cookies, cross-site tracking cookies, or third-party tracking cookies. We do not use analytics cookies today; if analytics are introduced in the future, they will be consent-gated. The cookies we set are:
| Name | Purpose | Duration |
|---|---|---|
| kc_session | Keeps you signed in to the storefront | ~30 days |
| kc_admin | Keeps administrators signed in to the management console | ~30 days |
| kc_consent | Remembers your cookie choices | ~180 days |
Cloudflare Turnstile, a privacy-preserving bot-protection check, runs on sign-in pages to protect accounts from automated abuse.
4. How we use information
We use personal information to:
- provide, maintain, and improve the Service, including delivering courses, tracking progress, and issuing certificates;
- protect the security and integrity of the Service and prevent fraud and abuse;
- comply with legal obligations and enforce our terms;
- send service communications, such as magic-link sign-in emails and transactional notices about your account, enrollments, and certificates;
- produce usage reporting for the institution operating this site and, where applicable, its agency.
5. We do not sell or share your information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under US state privacy laws. Because we do not engage in these activities, there is no sale or sharing to opt out of. We also honor the Global Privacy Control (GPC) signal as a valid opt-out preference where applicable.
6. Service providers and subprocessors
We rely on a small set of vetted providers to operate the Service. Each processes personal information only as needed to deliver its function and under contractual confidentiality and security obligations:
| Provider | Role |
|---|---|
| Cloudflare | Bot protection, networking, and file storage |
| Mux | Video streaming and playback |
| Stripe | Payment processing |
| Resend | Transactional email delivery |
| Fly.io | Application hosting |
| Supabase | Database |
| Upstash | Supporting infrastructure |
7. Data retention
- Account and learning records are kept while your account is active.
- Usage and IP logs are retained for up to 90 days and then deleted.
- Certificates are retained to preserve the integrity of the public verification page.
- Consent records are retained as legal proof that a choice was made.
When information is no longer needed for these purposes, we delete or de-identify it.
8. Your privacy rights
Depending on where you live, US state privacy laws give you the right to:
- Know and access the personal information we hold about you;
- Correct inaccurate personal information;
- Delete your personal information;
- Portability — obtain a copy of your information in a portable format;
- Opt out of sale or sharing — not applicable, because we do not sell or share your information;
- Non-discrimination — you will not be treated differently for exercising your rights.
To exercise a right, contact the institution operating this site, or email privacy@klickcourse.com. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by law. If we decline a request, you may appeal that decision by replying to our response; we will review the appeal and explain the outcome.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will remove it.
10. How we protect information
We use encryption in transit, access controls, and strict tenant isolation so that each institution's data is kept separate from every other institution's data. No method of transmission or storage is perfectly secure, but we work to protect your information using appropriate safeguards.
11. Changes to this policy
We may update this policy from time to time. The current version and effective date are shown at the top of this page. If we make material changes, we will re-prompt you to accept the updated policy before you continue using the Service.
12. Contact us
For privacy questions or to exercise your rights, contact the institution operating this site, or email privacy@klickcourse.com.