Privacy Policy

DRAFT for legal review · last updated 2026-09-06

What we store

Administrators: e-mail address, name, sign-in times.
Examiners and learners: name, program site, training level, e-mail address (for sending login codes), and a hashed login code.
Exam data: case materials uploaded by the program, schedules, evaluations (ratings, critical actions, written comments), and an activity log of administrative actions.

What we do not store

We never store login codes or passwords in readable form. We do not store payment details (there is no payment on the Service today). We do not use tracking cookies or third-party analytics.

Where data lives

All data is stored in Cloudflare's D1 database and KV storage in Cloudflare data centers, encrypted at rest and in transit (HTTPS only). Transactional e-mail (sign-in links, codes, score reports) is sent through Brevo; the e-mail address, subject, and message content pass through Brevo's servers for delivery.

Who can see what

Administrators of an organization see everything in that organization and nothing in any other.
An examiner sees only the learners scheduled in their own room and the case materials for their module.
A learner sees only their own schedule and, after the program releases results, their own score report.
The platform operator can access organizations for support and maintenance; such access is recorded in the activity log.

Retention and deletion

Data is kept until the program deletes the event or organization, which removes it permanently. Programs can export a complete copy at any time. Login-link tokens expire within minutes to days and are deleted after use.

Cookies

The Service uses only strictly necessary session cookies (signed, HttpOnly, Secure). Administrator sessions last 14 days; examiner and learner sessions last 24 hours.

Your rights

Learners and examiners may ask their program administrator to correct or delete their information. Programs may contact the operator to delete an entire organization.