Privacy policy

The controller is OmniLearnConsultingCommerce LLC (Wyoming, USA). For anything about your data: info@omnilearn.org.

• Account: your email address and password. The password is never stored in the clear; it is hashed with bcrypt.
• Google sign-in (optional): if you sign in with Google, we receive your email and name as Google passes them to us.
• Learning progress: completed lessons, experience points (XP), badges and level. We use these to show your progress and the leaderboard.
• Donations: when you support the platform, payment is handled by Stripe. We receive the amount, the date and a transaction ID, but never your card number.
• Course purchases: the course bought, the amount, the date and the Stripe transaction ID. Payment happens on Stripe servers, so your card number never reaches us.
• Instructors: if you publish a course, we keep your contact details, your courses and the sales figures behind your share. The identity documents and bank account needed to pay you out are collected and held by Stripe, not by us.
• Technical data: connection logs and the cookies the site needs to run.

• Authentication session cookie: keeps you signed in. Without it, you can't stay logged in.
• NEXT_LOCALE: remembers your language (English, French or Arabic).
• Audience measurement (Google Analytics, Mixpanel, Inc., San Francisco, USA): without your consent, Mixpanel counts page views without storing anything on your device and without recording your IP address. If you accept, it keeps an anonymous ID in your browser's local storage to link your visits and derives your approximate location from your IP address, which it does not store. Mixpanel keeps its data for the provider's default retention period.
• Error tracking (Sentry, Functional Software, Inc., San Francisco, USA): when a page crashes, Sentry receives the technical error message, the page address, your browser and operating system, and a truncated technical context. No cookie, no email address, no account data. This data is kept for 90 days.

• Creating and securing your account, and signing you in: performance of the contract.
• Tracking progress and running the gamification: contract and legitimate interest.
• Processing donations through Stripe: contract and accounting obligations.
• Taking payment for a course, opening the matching access and paying the instructor their share: contract and accounting obligations.
• Keeping the service secure and preventing abuse: legitimate interest.

• Account and progress data: kept while your account is active; deleted when you close it.
• Donation and purchase records: kept for as long as accounting and tax rules require, ten years for accounting documents.
• Purchased access: kept for the life of your account, otherwise the course you paid for would close again.
• Technical logs: kept for a few months, then purged.

We don't sell your data. A small set of providers process it so the service can run:

• Stripe (donations, course payments, instructor payouts): receives payment details directly, on its own servers.
• Google (OAuth sign-in, if you use it).
• Mixpanel, Inc. (audience measurement) and Functional Software, Inc. (Sentry, error tracking), both based in the United States; for these transfers we rely on the standard contractual clauses.
• Our host, for secure data storage.

If you live in the European Union, you have the rights of access, rectification, erasure, restriction, objection and portability. To use them, write to info@omnilearn.org from the address tied to your account. You may also lodge a complaint with your national data-protection authority.

If you live in California, you can ask which categories of personal data we hold about you, request their deletion, and opt out of any sale of data, noting that we do not sell personal data. Requests go to info@omnilearn.org.

Passwords are hashed, traffic is encrypted over HTTPS, and access to data is restricted. No system is perfect, so please pick a unique password kept just for OmniLearn.

This policy may change as the service does. The last-updated date sits at the top of the page.