Privacy policy
Last updated July 2026
We keep what is needed to run your account and nothing else. Your data is not sold, not shared with advertisers, and not used to train anything.
Who we are
StudiesSprint is the data controller for the information described here. Contact hello@studiessprint.com about anything on this page.
What we hold
- Account — name, email, a one-way hash of your password (never the password itself), and optionally a username, avatar, bio, date of birth, gender and how you heard about us.
- Learning — lessons completed, quiz attempts and scores, video positions, challenge submissions, diplomas issued.
- Community — your posts, comments, likes, reposts and who you follow.
- Technical — the date of your last visit, and your IP address transiently for rate limiting. We keep no analytics profile and no browsing history.
- Billing — a Stripe customer and subscription reference, plan status and renewal date. We never receive your card number.
Why, and on what basis
To provide the account you asked for, and to take payment where you chose to pay — that is performance of a contract. To keep the service secure and prevent abuse — our legitimate interest. We do not rely on consent for any of it, because none of it is optional marketing tracking.
What is public
Your profile — name, username, avatar, bio, level, diplomas and posts — is visible to anyone signed in. Diploma verification pages are public to anyone holding the code and show your name, the course and the date, so a bootcamp or employer can check it. Your email, date of birth, gender and quiz answers are never shown to other users.
Who processes it
| Who | For | Where |
|---|---|---|
| Supabase | Database hosting — accounts, progress, community posts | EU / US, depending on region |
| Stripe | Payments — card details go straight to Stripe, never to us | EU / US |
| Resend | Transactional email — password resets | US |
Some are outside the UK. Those transfers rely on the standard contractual clauses each provider publishes. Nobody else receives your data, and we do not sell it.
How long
While your account exists. Ask us to delete it and we remove your account, posts and progress within 30 days. Records of payments are kept for six years because tax law requires it — that means the charge, not your card details.
Your rights
You can ask for a copy of your data, correct it, delete it, get it in a portable form, or object to how we use it. Email hello@studiessprint.com and we'll respond within one month.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
Security
Passwords are hashed with bcrypt and cannot be read by anyone, including us. Sessions are signed tokens limited to one device at a time, and two-factor authentication is available. More detail on the security page.
Children
StudiesSprint is not intended for under-16s. If you believe a child has an account, tell us and we will remove it.
Cookies
One, to keep you signed in. No analytics, no advertising — see cookies.