Privacy Policy

Last updated: February 11, 2026

Overview

Learn to Cloud is a free, open-source educational platform that helps you learn cloud computing through structured, hands-on exercises. We are committed to protecting your privacy and being transparent about the data we collect and how we use it.

Data We Collect

When you sign in with GitHub, we collect only the following from your public GitHub profile:

  • GitHub user ID — used as your account identifier
  • Username — displayed on your profile and used for lookups
  • Display name — shown as your first and last name
  • Avatar URL — shown on your profile and dashboard

We do not collect your email address, password, private repositories, or any other personal information beyond what is listed above.

GitHub OAuth Scope

We request the read:user OAuth scope, which grants read-only access to your public profile information. We do not request access to your repositories, organizations, or any private data. Your GitHub access token is used only during sign-in and is never stored.

Data You Submit

As part of hands-on verification, you voluntarily submit URLs and tokens (such as GitHub repository URLs, deployed application URLs, and CTF tokens) to prove completion of exercises. This submitted data is stored alongside your account and may be visible on your public profile, with the exception of sensitive values (such as CTF tokens) which are redacted.

How We Use Your Data

Your data is used solely to:

  • Identify your account and maintain your session
  • Track your learning progress across phases
  • Verify completion of hands-on exercises
  • Generate completion certificates
  • Display your public profile and earned badges
  • Compute anonymous, aggregate community statistics (shown on the Status page)

What We Do Not Do

  • We do not sell, rent, or share your personal information with third parties
  • We do not use your data for advertising, recruiting, or marketing purposes
  • We do not send unsolicited emails (we don't even collect your email)
  • We do not scrape or crawl GitHub profiles beyond your own authenticated data
  • We do not store your GitHub access token

Public Profiles

Your profile is publicly accessible at /profile/your-username. It displays your first name, avatar, GitHub username, learning progress, earned badges, and validated submission URLs. All of this information is derived from data you voluntarily provided or submitted.

Cookies

We use a single session cookie to keep you signed in. This cookie is signed, HTTP-only, and contains only your user ID. We do not use tracking cookies, analytics cookies, or any third-party cookies.

Data Retention & Deletion

Your data is retained as long as your account exists. You can permanently delete your account and all associated data (progress, submissions, and certificates) at any time from your Account page. Deletion is immediate and irreversible.

Third-Party Services

We interact with the following external services on your behalf, only when you initiate a verification:

  • GitHub API — to verify repositories and profiles you submit
  • Azure OpenAI — to analyze code you submit for verification (code is not stored by the LLM)

Open Source

This application is open source. You can review the full source code to verify our data practices at github.com/learntocloud/learn-to-cloud-app.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository or start a discussion in our GitHub Discussions.