Privacy notice

Draft for legal review. This page is not final. Before launch, a lawyer should check it, including:

the business name and address (highlighted below), and the ICO registration (data protection fee) number
the lawful bases and retention periods in the table
the newsletter tool, once chosen, added to the list of processors
the international transfer safeguards, against Cloudflare's and Stripe's current data processing terms

Then fill in site in zipcourse.config.mjs and set legalReviewed: true.

1. Who we are

legal name of the business ("we") runs ZipCourse and is the controller of the personal data described here. Our address is postal address. For anything about your data, email support@zipcourse.app.

2. The short version

Your courses are built and kept on your computer. We never receive your slides, media or quizzes.
Results from your learners go to your LMS. We never receive learner data.
We hold your email, what you've bought and what you've exported (as scrambled fingerprints), and keep it no longer than we need.
No advertising, no analytics trackers, and we never sell data.
You can download, correct or delete your data from Account in the editor.

3. What we hold, why, and for how long

Data	Why	Lawful basis	Kept for
Your email address	To sign you in, send receipts and account emails, and answer you	Contract	Until you delete your account
Consent records: which wording you agreed to, and when (the terms, the newsletter, and starting credits straight away)	To show what you agreed to, for example if a payment is disputed	Legal obligation and legitimate interests	Two years after you delete your account
Sign-in sessions: a hash of each session token, a device label such as "Chrome on Windows", and dates	To keep you signed in and let you see and end sessions	Contract	30 days, or until you sign out
Sign-in codes (stored only as a keyed hash) and when codes were requested	To sign you in and stop abuse	Contract and legitimate interests	10 minutes for codes, one hour for requests
Course IDs and course fingerprints, and how many edits each course has used	To know which courses you have paid for	Contract	Until you delete your account
Export log: course ID, fingerprint, formats, cost, a scrambled form of your IP address, and the time	To detect fraud and account sharing	Legitimate interests	90 days
Credits, payments, refunds and Stripe references (not card details)	To provide credits and Pro, give refunds, and keep tax records	Contract and legal obligation	Seven years after you delete your account (tax law requires six years from the end of the financial year)
Email preferences, and whether emails to you bounce	To send only the emails you want	Contract and legitimate interests	Until you delete your account
Newsletter subscription	To send news and tips	Consent (withdraw it at any time)	Until you unsubscribe or delete your account
Emails you send us	To help you	Legitimate interests	Up to two years after the conversation ends
Messages sent with the contact form: your name, email, phone number if you give it, your message, and for a bulk credits or education enquiry your organisation and the credit pack you ask about	To answer you, and to prepare a quote if you ask for one	Legitimate interests, or steps before a contract when you ask for a quote	365 days in our database (the copy in our inbox is kept as for emails you send us)
Server logs: IP address, browser, page and time	To keep the service secure and working	Legitimate interests	Up to 7 days

"Contract" means we need the data to provide what you asked for. "Legitimate interests" means we need it to run ZipCourse securely and fairly, in ways you'd expect; you can object to these (see section 7).

When you delete your account, your email address, sessions, codes, preferences and course records are deleted at once. The records we must keep for longer are no longer linked to your email.

4. What we never collect

The content of your courses: it stays on your computer.
Anything about your learners: the course reports to your LMS only.
Card or bank details: Stripe handles payments.
Analytics or advertising tracking of any kind.

Cloudflare hosts ZipCourse, stores account data, sends our emails and runs Turnstile, the check that you're a person when you ask for a sign-in code or use the contact form. Cloudflare acts as our processor.
Stripe takes payments, as merchant of record through Stripe Managed Payments. Stripe receives what you enter at checkout and is a controller of that payment data under Stripe's privacy policy. We send Stripe your email and a random account reference.
Our newsletter tool, only if you join the mailing list.
Professional advisers, and authorities when the law requires it.

We never sell personal data or share it for advertising.

6. Transfers outside the UK

Cloudflare and Stripe may process data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (such as the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Addendum to the standard contractual clauses.

7. Your rights

You have the right to:

see your data: download it any time from Account, Download my data, or email us;
correct it: change your sign-in email in Account;
delete it: use Delete my account in Account;
take it elsewhere: the download is a standard JSON file;
object to processing based on legitimate interests, or ask us to restrict it;
withdraw consent to the newsletter: use the link in any newsletter or the setting in Account.

Email support@zipcourse.app to use any of these; we reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Cookies and storage

ZipCourse sets one cookie, __Host-zc_session, only when you sign in. It keeps you signed in for 30 days and is strictly necessary, so it doesn't need consent. There are no analytics or advertising cookies.

The editor keeps your courses and settings in your browser's own storage (IndexedDB and local storage) on your computer. That data is never sent to us; clearing your browser's site data deletes it.

Courses with bonus games remember three things in the learner's browser (local storage), so the games pick up where they left off: the sound level, the learner's best score in each game, and which of the games' built-in puzzles and words they've already seen, so new ones come first. Nothing in it identifies the learner, and it's never sent to us. It stays on that device (the score from each game played goes to your LMS with the learner's other results), and clearing the site data for the site the course runs on deletes it. Games in the editor's preview do the same in your browser.

Stripe's checkout and billing pages, and Cloudflare Turnstile, may use their own cookies or similar technology to prevent fraud; see their privacy policies.

9. Changes to this notice

We'll update this notice when what we do changes, and email you about significant changes before they happen.