Your privacy

When you make an account we keep your e-mail address and your name. Your password is never kept: what is stored is an Argon2 hash of it, which nobody here can read back. The six-digit codes for confirming an e-mail address or resetting a password are stored only as a SHA-256 digest, and stop working after 30 minutes.

You can also add a phone number, your governorate or city, your birth year, the subjects that interest you and a profile picture. All of those are optional, and you can change or clear them in your profile at any time.

As you use the site we keep the courses you are enrolled in and how far you have watched each lesson, the suggestions you send, and the teacher or university applications you write. Every sign-in records the network address (IP) and the browser it came from, and every admin action that changes who can see or do what is recorded with that admin’s network address.

Two cookies: one keeps you signed in, the other remembers whether you chose the light or the dark theme. There is no advertising and no tracking of any kind on this site.

The e-mail address is how you sign in and how we reach you about your account. Your name and picture are what a teacher and the other members of your university see. The city, birth year and interests only help us suggest courses that fit; nothing depends on them.

Progress is kept so a lesson starts again where you left it. The sign-in and admin records exist for one question that comes later: who did this, and from where. They are never used to decide what you are allowed to do.

Public: your name and profile picture. For a teacher, also the headline, bio, links, areas and teaching languages, once a first course is published. Your phone number is shown only if you switch it on yourself in your profile, and your e-mail address never is.

Admins can see every account’s details, the applications and suggestions sent in, and the records described above. A university’s managers see the members of their own university.

Nobody else. We do not sell anything about you and we do not hand it to advertisers.

In one PostgreSQL database in Amsterdam, in the Netherlands, together with the images — course covers, adverts and profile pictures are stored in the database itself.

The pages you read reach you through Cloudflare’s network, which sits in front of the site. E-mail — confirmation codes, password resets, invitations — is sent through Resend, which is given the address it must deliver to and the text of the message.

Your account and everything on it is kept for as long as the account exists.

A sign-in lasts until you sign out or it expires, and signing out ends it. Expired sign-ins are not yet swept from the database, so their row — with the network address it was created from — stays there.

The records of admin actions are append-only: they are never edited or deleted, and they keep their network addresses for as long as the platform runs. That is deliberate — a record that can be rewritten settles no dispute.

In your profile you can change your name, e-mail address, phone number, city, birth year, interests and picture at any time, hide your number from public view, and change your password — which signs out every other device.

There is no button on this site for deleting your account or for downloading a copy of what we hold. For either one, write to the address below and an admin does it by hand. Write from the e-mail address the account uses, so we know it is you.

When an account is deleted, what it holds goes with it. The records of admin actions stay, because they are only ever added to and cannot be deleted.

To have your account deleted, to get a copy of what we hold, or for any question about this page, write to us.

More about us ›