Your data

Privacy

A list of what is actually stored, taken from the database itself rather than written in general terms.

What we hold

Your account — name, email address, and a hashed password. The password itself is never stored and cannot be recovered, only replaced.
Your photograph, if you add one. It is re-encoded on upload, which strips the location and device details a camera attaches to a file. The original is never stored or served.
Your work — the links you submit for each brief, and the answers you give in activities.
Your marks — scores, the reasoning recorded against each mark, and your points total.
Attempt records — when a proctored activity was started and submitted, and any flags raised during it.
Sign-in records — recent attempts, so an account can be protected from being guessed at.

What is public

Only issued certificates. A certificate's verification page shows your name, your photograph, what it was awarded for and the score — that is the entire purpose of it, and anyone you give the link to can check it. Nothing else about you is public: not your marks, not your submissions, not your email address.

Where it lives

The platform runs on two separate machines with separate databases. This public server holds your account, your submissions and your published results. Assessment — the rubrics, the marking guidance and the judging — runs on a private machine that is not reachable from the internet. It reaches out to collect work and return marks; nothing connects inward to it.

One exception, and it is worth stating plainly. Multiple-choice questions are marked here, on this server, the moment you answer them — that is why a quiz result appears immediately instead of arriving later. Marking them here means their answers are stored here too. What stays on the private machine is everything used to judge written work and projects: the rubrics, the guidance the models are given, and the marking of anything not answered by picking an option.

Who else sees it

Marking models. Written answers and project descriptions are sent to AI providers to be judged. Your name and email are not sent with them.
Email delivery. Your address is used to send results, notifications and password resets.
Nobody else. Your data is not sold, and it is not used for advertising.

How long

For as long as your account exists, and then until you ask for it to be removed. Issued certificates outlive the account, because a certificate that stops verifying is worthless to the person holding it.

Your choices

You can turn result emails off in your account settings and still see everything in the portal.
You can replace or remove your photograph at any time.
You can ask for a copy of everything held about you.
You can ask for your account and personal data to be deleted.

For any of the last two, contact us from the address on your account.