Privacy notice

Last updated 7 November 2026.

The short version

Without an account, your progress stays in your own browser. With an account, we keep your name, email and progress so you can pick up on any device. We do not use advertising, tracking cookies or analytics, and we do not sell data.

Without an account

• Progress and your code are saved in your browser's local storage on your device. Clearing your browser data removes them. We never receive them.
• Under-18s learn this way. We do not collect personal details from anyone under 18.

With an account (18 and over)

• What we keep: your name, your email address, your password as a one-way hash (we cannot read it), which lessons and missions you finished and when, and your Officially Family ID.
• If you use Sign in with WorkOfficially: WorkOfficially sends us your name, email address and account identifier. We do not keep WorkOfficially's sign-in tokens. WorkOfficially's own privacy policy covers your WorkOfficially account.
• Cookies: one cookie keeps you logged in, and a short-lived one protects the sign-in step. No tracking cookies.
• Emails: only the ones your account needs, such as confirming your address or resetting your password.
• Where: on our own server at Amazon Web Services in the United States, with encrypted storage.
• Deleting: you can delete your account and saved progress at any time from your account page.

Services that see your visit

• Our web server keeps standard technical logs (address, page, time) for security, for a short period.
• Python in the browser: the Python lessons load the Pyodide engine from the jsDelivr network the first time you press Run. jsDelivr sees that request.
• WorkOfficially, when you choose to sign in with it.

Contact

Questions or requests: our help centre.