Privacy Policy

1. Data we collect

• Account data — your name, email address, and chosen career path, created when you sign up (by email or via Google / GitHub).
• Learning data — your project progress, submissions, and public portfolio content you choose to publish.
• Billing data — if you subscribe, payments are processed by Stripe. We never see or store your card details; we only keep a Stripe customer/subscription reference and your plan status.
• Usage & analytics — only if you accept cookies (see section 3): aggregate, privacy-friendly usage statistics.

2. How we use your data

• Provide and operate the platform (your account, projects, and portfolio).
• Process subscriptions and manage access to paid content.
• Send you essential service emails (account, billing) and — with the relevant lawful basis — occasional product and educational emails.
• Understand how the site is used so we can improve it (only with your consent).

3. Cookies & analytics

We do not load any analytics or set any non-essential cookies until you click Accept on our cookie banner. Nothing is sent without your consent.

If you accept, we use Google Analytics and Datafast to understand aggregate traffic and usage. If you reject, the site works exactly the same and no analytics are loaded. You can change your mind at any time by clearing your browser data, which will show the banner again.

Essential cookies and local storage strictly required to keep you signed in and remember your cookie choice are always used, as they are necessary for the service to function.

4. Service providers

We share data only with the processors needed to run D8A:

• Supabase — authentication and database hosting.
• Stripe — payment processing and subscription billing.
• Mailchimp — email list management and marketing emails.
• Google Analytics & Datafast — website analytics (consent-based).
• Vercel — application hosting and delivery.

Each provider processes your data under its own privacy terms and only as needed to provide its service to us.

5. Email & marketing

When you create an account, your email may be added to our Mailchimp audience so we can send you product updates and educational content. Every marketing email includes an unsubscribe link, and unsubscribing never affects your access to the platform.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove or anonymize your personal data, except where we must retain certain records (for example, billing records required by law).

7. Your rights

Depending on your location (including under the GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@d8a.academy.

8. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the site.

9. Contact

Questions about this policy or your data? Email us at contact@d8a.academy.