1. What we collect
The information we collect depends on how you use the Service. We may collect:
- Email address for account access, receipts, support, and updates you request.
- Email address for requested resources, such as delivering the CCF Reasoning Guide and verifying that you control the address.
- Account and login information when accounts are used to access Correct Code Framework member library products.
- Purchase and subscription metadata, such as products purchased, plan type, timestamps, transaction status, and renewal or cancellation status where applicable.
- Stripe checkout, customer, payment, and session identifiers where needed to verify payment and grant the correct access level.
- Access level or entitlement status, such as Starter Plan, Student Plan, or Pro Plan.
- Support messages or requests you send to us.
- Email consent and delivery records, including verification, marketing consent, unsubscribe, suppression, bounce, complaint, and delivery-event records.
- Basic device, browser, and log data used for reliability, security, and troubleshooting.
- Analytics data from tools such as Google Analytics only after analytics consent is granted, including page usage, referral, approximate location, device, browser, and interaction data.
- Cookies or local storage used for essential session state, authentication, security, checkout, consent preferences, optional analytics, or site functionality.
2. How we use information
- Deliver account access and Correct Code Framework member library products.
- Process and verify purchases or subscriptions.
- Manage paid access levels and entitlements.
- Send transactional emails such as receipts, access instructions, account notices, or security messages.
- Send requested resources such as the CCF Reasoning Guide after email verification.
- Respond to support requests.
- Improve reliability, security, and user experience.
- Prevent abuse, fraud, or unauthorized access.
- Send marketing email when you have provided the required consent or when otherwise legally permitted.
3. Payments
Payments are processed by third-party payment processors such as Stripe; we do not store full card numbers on our servers. Payment processors may collect payment information, billing details, transaction status, fraud-prevention data, and related identifiers according to their own policies. We may receive purchase metadata from the processor so we can confirm payment, provide receipts, and grant the correct access level.
4. Sharing
We share information only as needed to operate the Service, provide access, process payments, send transactional messages, analyze site performance, protect against abuse, comply with legal obligations, or respond to lawful requests. Service providers may include payment processors, hosting providers, email delivery providers, analytics providers, security or fraud-prevention services, and support or operations tools. We do not sell personal information. We use Resend as an email-delivery provider for account, requested-resource, purchase, and marketing email workflows.
5. Cookies & analytics
We use essential authentication, antiforgery, security, checkout, consent storage, and session technologies to keep the Service functional. These technologies support login, access control, account security, purchases, and paid products.
Google Analytics 4 is optional and loads only after you grant analytics consent. You can withdraw analytics consent at any time through Cookie Settings in the footer. Rejecting analytics does not prevent access to normal public content, login, purchases, or paid products, and prevents us from sending that visitor's activity to Google Analytics. Withdrawing analytics consent stops future collection where technically possible, but does not retroactively erase data already processed before withdrawal.
Stripe may use cookies or similar technologies for checkout, payment processing, fraud prevention, and security.
Embedded YouTube content may receive technical information when videos are loaded or played; where practical, we use
YouTube's privacy-enhanced youtube-nocookie.com embed domain. You can control cookies through your browser
settings, but some essential features may not work correctly if essential cookies are disabled.
6. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. No method of transmission or storage is 100% secure, but we work to keep access lawful, limited, and controlled.
7. Data retention
We keep personal information only as long as reasonably necessary to provide access, maintain purchase records, comply with legal obligations, resolve disputes, prevent fraud, and operate the Service. Retention periods may vary based on the type of information and the reason it was collected.
8. Your choices and requests
- Unsubscribe: You can unsubscribe from non-transactional emails using the link in the email.
- Marketing email: Unsubscribing from marketing email does not stop necessary account, security, purchase, subscription, or requested transactional communications.
- Access: You can request access to personal information associated with your account or purchases.
- Correction: You can request corrections if your information is inaccurate.
- Deletion: You can request deletion of personal information, subject to legal, security, accounting, and operational requirements.
- Cookies: You can control browser cookies through your browser settings and change optional analytics consent through Cookie Settings in the footer.
- Privacy requests: You can contact support for privacy questions or requests.
9. Contact
For privacy questions, access requests, correction requests, or deletion requests, contact us at [email protected].