Legal

Privacy Policy

Last updated: November 9, 2026

In short: we collect your email, a sign-in identifier, your course progress and billing identifiers; we do not sell your data or run advertising trackers; payments are handled by Stripe; and you can delete your account at any time.

This policy explains what personal information FDE Academy ("we", "us") collects when you use fdeacademy.dev, why we collect it, who we share it with, and the choices you have. We try to collect as little as we need to run the course.

The service is operated by 14328507 Canada Inc., Vancouver, British Columbia, Canada. Contact: admin@fdeacademy.dev.

1. Information we collect

• Account details. Your email address and a sign-in identifier from the method you choose: Google (your Google account id and verified email) or an email magic link. We do not receive your Google password.
• Sign-in and security records. When you sign in or accept the Terms we store a one-way hash of your IP address (not the address itself), timestamps, and a hashed session token. We use this to keep your account secure, prevent abuse, and record that you accepted the Terms.
• Learning progress. Which chapters you have opened or completed, your quiz results, and your review schedule. This is saved on your device and, when you are signed in, synced to your account.
• Billing information. Payments are processed by Stripe. We store only your Stripe customer id, subscription id, plan (monthly or annual), subscription status and renewal date. We never see or store your card number.
• Content protection marks. Paid lesson pages delivered to you include an identifier tied to your account, used to deter unauthorised copying and to trace leaks.
• Technical data. Like any website, our hosting provider processes standard request data (such as IP address and browser type) to deliver pages and protect against attacks.

We do not use advertising trackers or third-party analytics on the site. We do not sell your personal information.

2. How we use it

• To create your account, sign you in, and keep you signed in.
• To provide paid content, sync your progress, and manage your subscription.
• To send emails you ask for (sign-in links) and essential account or billing messages.
• To detect abuse, enforce the Terms, and keep the service secure.
• To meet legal, tax and accounting obligations.

3. Google user data

This section applies if you choose "Sign in with Google" on FDE Academy (fdeacademy.dev).

• What we access. We request only the openid and email scopes. From Google we receive your Google account identifier and your verified email address. We do not request or receive your Google password, contacts, calendar, Drive files, Gmail messages or any other Google data.
• How we use it. Solely to create your FDE Academy account, recognise you when you sign in again, link your subscription to your account, and send account-related email such as sign-in links and billing notices. We do not use it for advertising, profiling, or to build any other product.
• How we store and protect it. Your email and Google identifier are stored in our database (hosted by Cloudflare) over encrypted connections, with access limited to the operator of the service. Session tokens and sign-in tokens are stored only as one-way hashes.
• Who we share it with. We do not sell it and do not share it for advertising. It is processed only by the service providers listed in section 4, and only as needed to run the service, or disclosed if the law requires.
• How long we keep it. Until you delete your account (see section 7). After deletion, copies may persist briefly in provider backups before being overwritten.
• Deleting your data or revoking access. Use Delete account on your Account page, or email admin@fdeacademy.dev and we will delete it. You can also remove FDE Academy's access to your Google account at any time at myaccount.google.com/permissions.
• Google API Services User Data Policy. FDE Academy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who we share information with

We use these service providers, who process information on our behalf:

• Cloudflare: hosting, our database, file storage, content delivery, and bot protection on sign-in forms.
• Resend: delivery of sign-in emails.
• Stripe: payment processing, tax handling and subscription billing. Stripe acts as merchant of record for purchases and has its own privacy policy.
• Google: only if you choose to sign in with it.

These providers may process data in countries other than your own. We may also disclose information if required by law or to protect our rights, users or the service.

5. Cookies and local storage

We use one strictly necessary cookie to keep you signed in (HttpOnly, secure, up to 30 days). Your browser's local storage holds your progress, theme preference and, if you choose to use hands-on labs with your own AI API key, that key. Your own API key stays in your browser and is never sent to us. We do not use advertising or tracking cookies.

6. How long we keep information

• Account, progress and billing identifiers: until you delete your account.
• Sign-in sessions: up to 30 days after last use. Hashed sign-in tokens expire within minutes.
• Terms-acceptance records: kept with your account as proof of agreement.
• Payment and tax records held by Stripe: as required by law.
• After deletion, copies may remain in provider backups for a short period (for example, a rolling window of several days) before they are overwritten.

7. Your choices and rights

You can delete your account at any time from the Account page. If you have an active subscription, cancel it first from the billing portal. Deleting your account removes your profile, progress, sign-in identifiers and subscription records from our systems. You can also email us to ask for a copy of your information, to correct it, or to delete it. Depending on where you live, you may have additional rights under laws such as Canada's PIPEDA, the EU/UK GDPR or California law; we will honour requests as those laws require. You may also complain to your local privacy regulator.

8. Security

We protect information with encrypted connections, hashed tokens and IP addresses, access controls, and rate limits. No online service can be perfectly secure, so please use a unique account and tell us promptly if you suspect misuse.

9. Children

The service is meant for adults and is not directed to children under 16. We do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

10. Changes

We may update this policy. We will change the date above and, for material changes, notify you by email or on the site.

11. Contact

Questions or requests: admin@fdeacademy.dev.