Privacy Policy
CodingNic respects your privacy. This page explains what we collect, how we use it, and the choices you have. We aim to collect the minimum needed to run the platform.
What we collect
- Account info — your name, email, and timezone, provided when you sign in.
- Bookings — the sessions you schedule with the tutor, including any notes you add.
- Course activity — which lessons you’ve viewed and marked complete, used to track your progress.
- Messages — the contents of conversations you have with the tutor through the platform.
- Reviews — the rating and comment you choose to publish (with your name).
- Site visits — anonymous, aggregated page-view counts. No tracking across cleared cookies.
How we use it
- To run the service: show your bookings, sync sessions to your calendar, deliver lessons, and let you message your tutor.
- To send you transactional email: booking confirmations, reminders 24 hours before a session, password-free login codes, and message digests when you have unread messages.
- To improve the platform: aggregate usage stats only — never tied to your identity in reports.
We do not sell your data, run ads, or share your information with third parties for marketing.
Cookies
We use a single first-party cookie (codingnic_session) to keep you signed in. It expires after 30 days of inactivity. There are no third-party tracking cookies.
Who can see your data
- You — full access to everything in your account.
- The tutor — your name, email, bookings, messages, and course progress, since they need it to teach you.
- Service providers — our email delivery service (SMTP) processes the body of emails we send to you. Our database is hosted on a secure server.
- No one else. We don’t share data unless legally required to do so.
Your rights
- Access — request a copy of all data we hold about you.
- Correction — update your name, email, or timezone from your profile.
- Deletion — request account deletion at any time. This removes your account, bookings, messages, and progress. Some records may be kept briefly for legal or accounting purposes.
- Portability — request your data in a machine-readable format.
To exercise any of these rights, contact us using the email on the contact page.
Security
- All connections use HTTPS.
- Passwords aren’t stored — we use one-time codes sent to your email instead.
- Session tokens are hashed before being stored in our database.
- Secrets and credentials are never logged or exposed.
Changes to this policy
When we update this page, we’ll bump the “Last updated” date at the top. Major changes will be announced via email.
Contact
Questions about this policy or your data? Reach out via the contact page.