Privacy Policy

Last updated: February 23, 2026

Overview

Learn to Cloud is a free, open-source educational platform that helps you learn cloud computing through structured, hands-on exercises. We are committed to protecting your privacy and being transparent about the data we collect and how we use it.

Data We Collect

When you sign in with GitHub, we collect only the following from your public GitHub profile:

  • GitHub user ID — used as your account identifier
  • Username — used to identify your account
  • Display name — used to greet you on your dashboard
  • Avatar URL — shown in the navigation bar

We do not collect your email address, password, private repositories, or any other personal information beyond what is listed above.

GitHub OAuth Scope

We request the read:user OAuth scope, which grants read-only access to your public profile information. We do not request access to your repositories, organizations, or any private data. Your GitHub access token is used only during sign-in and is never stored.

Data You Submit

As part of hands-on verification, you voluntarily submit URLs and tokens (such as GitHub repository URLs, deployed application URLs, and CTF tokens) to prove completion of exercises. This submitted data is stored alongside your account.

How We Use Your Data

Your data is used solely to:

  • Identify your account and maintain your session
  • Track your learning progress across phases
  • Verify completion of hands-on exercises
  • Compute anonymous, aggregate community statistics (shown on the Status page)

What We Do Not Do

  • We do not sell, rent, or share your personal information with third parties
  • We do not use your data for advertising, recruiting, or marketing purposes
  • We do not send unsolicited emails (we don't even collect your email)
  • We do not scrape or crawl GitHub profiles beyond your own authenticated data
  • We do not store your GitHub access token

Cookies

We use a single session cookie to keep you signed in. This cookie is signed, HTTP-only, and contains only your user ID. We do not use tracking cookies, analytics cookies, or any third-party cookies.

Data Retention & Deletion

Your data is retained as long as your account exists. You can permanently delete your account and all associated data (progress and submissions) at any time from your Account page. Deletion is immediate and irreversible.

Third-Party Services

We interact with the following external services on your behalf, only when you initiate a verification:

  • GitHub API — to verify repositories and profiles you submit
  • Azure OpenAI — to analyze code you submit for verification (code is not stored by the LLM)

Open Source

This application is open source. You can review the full source code to verify our data practices at github.com/learntocloud/learn-to-cloud-app.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository or start a discussion in our GitHub Discussions.