Last updated: May 27, 2026
When you sign in with GitHub, we receive and store:
We also store your lab activity: which labs you attempted, which you completed, the YAML you submitted, and timestamps.
We do not sell, rent, or share your data with any third party.
All data is stored in MongoDB Atlas (AWS us-east-1 region). Sessions are JWT-based and stored in an HTTP-only cookie. Lab progress is also cached in your browser's localStorage for offline-first performance.
| Service | Purpose |
|---|---|
| GitHub OAuth | Sign-in only — we never post on your behalf |
| MongoDB Atlas | Progress and user data storage |
| Vercel | Hosting and serverless compute |
| Resend | Transactional email (welcome + admin notification) |
| Vercel Analytics | Anonymous page-view analytics — no personal data |
Your data is retained for as long as your account is active. To delete your account and all associated data, open a GitHub issue with your GitHub username. We'll process it within 7 days.
We use a single HTTP-only session cookie set by NextAuth for authentication. No advertising or tracking cookies.
Questions about this policy? Open an issue on GitHub.