1. Data we collect

This includes account details (name, email, handle), security metadata (2FA, last access), course and community activity, and technical logs for automation health checks.

2. How we use data

Data powers authentication, course access, notifications, support tickets, and abuse prevention such as rate limiting and IP blacklists after repeated failed logins.

3. Storage and media

Media and file uploads may be stored on the main server or external storage (like Supabase Storage or S3). Files are compressed when possible but never executed on the server, to avoid security risks.

4. Your choices

You will be able to control notification preferences per course and channel, request account deletion, and manage API access via your settings page as more features come online.