Data and preferences
How subscription and feedback data are used and stored, and how communication preferences work.
Minimal data, clear purpose.
Subscriptions store full name, email, language, communication preferences, consent-text version and registration time in Cloudflare D1. Feedback stores the message, type, related page and optional reply address. Access is protected.
Each preference is separate.
Important-update and marketing preferences are separate. An email supplied for feedback or an exam does not automatically subscribe. These forms do not send email at registration or verify ownership of the address.
Communication preferences.
Use the personal link provided after a successful subscription to change your communication preferences. Save the link and do not share it.
Retention and delivery.
Cloudflare Turnstile performs bot checks. Raw IP addresses are not written to form tables; rate limits use short-lived, secret-derived digests. Maintenance deletes expired rate-limit records, feedback older than 90 days and unverified subscriptions older than 365 days. If email delivery is enabled later, verification, the provider and unsubscribe flow will be explained separately.
Assessment records and project announcements.
Providing your name and email for an assessment is not permission to send project announcements. You may select the separate optional checkbox to request email about future projects and offers. Your choice, copy version and assessment start time are kept in the private record. Address ownership is not verified yet; this record alone is not permission to send emails. An assessment timer expiring does not automatically delete the record.
Measuring site usage.
When enabled on the online website, Cloudflare Web Analytics measures visits and performance in aggregate. Custom action measurement counts lesson opens, read marks, assessment starts and certification page views. These action records contain only the event type, related page or lesson, and language; names, emails, answers and notes are excluded. They are not joined to assessment or subscription records, and no persistent visitor identifier is created. A read mark does not establish that learning is complete.