Privacy Policy
CodeCraft Academy respects your privacy. This policy explains what information we collect when you sign in, watch courses, or purchase access, and how we keep it secure.
1. Information We Collect
We collect your email address when you sign in via passwordless OTP or OAuth (GitHub/Google), your lesson watch timestamps in Cloudflare D1 to track completion, and order confirmation data from Lemon Squeezy.
2. How We Use Your Data
Your data is strictly used to deliver course videos, resume your playback state across devices, send login verification codes, and deliver starter code archives. We never sell or rent your personal data to third parties.
3. Analytics & Attribution
We use privacy-focused analytics (PostHog) to track anonymized YouTube UTM campaign attribution and regional Purchasing Power Parity (PPP) country codes (derived from Cloudflare CF-IPCountry headers).
4. Third-Party Processors
Our third-party infrastructure processors include Cloudflare (edge hosting, D1, R2), Lemon Squeezy (Merchant of Record payments), and Resend (transactional login & lead emails). Each processor complies with industry security standards.
5. Account Deletion Rights
You may request the deletion of your account, lesson progress, and associated session records at any time by contacting privacy@codecraft.dev.