Privacy policy

The controller is OmniLearnConsultingCommerce LLC (Wyoming, USA). For anything about your data: info@omnilearn.org.

• Account: your email address and password. The password is never stored in the clear; it is hashed with bcrypt.
• Google sign-in (optional): if you sign in with Google, we receive your email and name as Google passes them to us.
• Learning progress: completed lessons, experience points (XP), badges and level. We use these to show your progress and the leaderboard.
• Donations: when you support the platform, payment is handled by Stripe. We receive the amount, the date and a transaction ID, but never your card number.
• Technical data: connection logs and the cookies the site needs to run.

• Authentication session cookie: keeps you signed in. Without it, you can't stay logged in.
• NEXT_LOCALE: remembers your language (English, French or Arabic).
• Audience measurement: where used, an anonymous analytics cookie helps us see which pages get read.

• Creating and securing your account, and signing you in: performance of the contract.
• Tracking progress and running the gamification: contract and legitimate interest.
• Processing donations through Stripe: contract and accounting obligations.
• Keeping the service secure and preventing abuse: legitimate interest.

• Account and progress data: kept while your account is active; deleted when you close it.
• Donation records: kept for as long as accounting and tax rules require.
• Technical logs: kept for a few months, then purged.

We don't sell your data. A small set of providers process it so the service can run:

• Stripe (donation payments): receives payment details directly, on its own servers.
• Google (OAuth sign-in, if you use it).
• Our host, for secure data storage.

If you live in the European Union, you have the rights of access, rectification, erasure, restriction, objection and portability. To use them, write to info@omnilearn.org from the address tied to your account. You may also lodge a complaint with your national data-protection authority.

If you live in California, you can ask which categories of personal data we hold about you, request their deletion, and opt out of any sale of data, noting that we do not sell personal data. Requests go to info@omnilearn.org.

Passwords are hashed, traffic is encrypted over HTTPS, and access to data is restricted. No system is perfect, so please pick a unique password kept just for OmniLearn.

This policy may change as the service does. The last-updated date sits at the top of the page.