Privacy Policy
How we protect and handle your data
1. Information We Collect
Account Information
When you create an account, we collect:
- Username and email address
- Password (encrypted and never stored in plain text)
- Profile information you choose to provide
Social Login Data
If you use social login (GitHub, Google, Discord), we receive:
- Your name and email from the provider
- Profile picture (if provided by the provider)
- Unique identifier from the social platform
Usage Information
We automatically collect:
- Course progress and completion data
- Quiz attempts and scores
- Lab session activity
- Access logs for security purposes
2. How We Use Your Information
We use collected information to:
- Provide and improve our educational services
- Track your learning progress and issue certificates
- Send important updates about your account and courses
- Respond to your support requests
- Prevent fraud and ensure platform security
3. Information Sharing
We do not sell your personal information. We may share data only:
- With service providers who help operate our platform (hosting, email delivery)
- When required by law or to protect our legal rights
- With your explicit consent
4. Data Security
We implement industry-standard security measures:
- Encrypted data transmission (HTTPS/TLS)
- Secure password hashing
- Regular security audits
- Isolated lab environments
5. Your Privacy Rights
You have the right to:
- Access your personal data
- Request data correction or deletion
- Export your data
- Opt-out of marketing emails
- Delete your account at any time
6. Cookies and Tracking
We use essential cookies for:
- Session management and authentication
- Course progress tracking
- Security and fraud prevention
We use privacy-focused analytics (Plausible) that does not track individuals or use invasive cookies.
7. Tor and Privacy
We support Tor users and respect anonymity:
- Social logins are disabled on .onion addresses
- We do not log IP addresses for Tor users
- Anonymous accounts are permitted
8. Children's Privacy
Our services are not intended for users under 13. We do not knowingly collect data from children.
9. Data Retention
We retain your data as long as your account is active. After account deletion:
- Personal data is removed within 30 days
- Anonymized learning analytics may be retained
- Legal compliance may require some data retention
10. Changes to This Policy
We may update this policy periodically. Significant changes will be notified via email.
11. Contact Us
For privacy concerns or data requests, contact us at:
Email: admin@darkwebacademy.com
PGP: Available at darkwebacademy.com/pgp