Privacy Policy

Last updated: Oct 2025

1. Overview

This Privacy Policy explains how Reallab collects, uses, and protects personal data when you use our courses, playground environments, and authentication features.

2. Data Controller

Reallab is the data controller for personal data processed through the Services. We may engage third parties as processors or independent controllers depending on their role.

3. Information We Collect

  • Account data: username, email, and hashed password.
  • Authentication data: verification codes, OAuth identifiers (GitHub/Google).
  • Usage data: course progress, playground/environment interactions, logs and errors.
  • Technical data: device, browser type, IP, and basic analytics.
  • Anti-abuse verification: Cloudflare Turnstile tokens.

4. How We Use Your Data

  • Provide and improve service functionality and reliability.
  • Authenticate users and secure accounts.
  • Prevent abuse and ensure availability.
  • Communicate updates and respond to support requests.
  • Comply with legal obligations and enforce our Terms.

5. Legal Bases

We process personal data based on contract, legitimate interests (security, improvement, fraud prevention), consent (where required), and legal obligations.

6. Cookies and Tracking

We may use cookies and similar technologies necessary for authentication and session management. Any analytics are limited and privacy-conscious.

7. Third-Party Providers

We integrate providers such as GitHub/Google OAuth, email services, and Cloudflare Turnstile. They may process limited personal data subject to their own policies.

8. Data Sharing

We do not sell personal data. We share data with service providers strictly to operate the platform, or when required by law.

9. Data Security

We implement technical and organizational measures to protect personal data, but no method of transmission or storage is completely secure; we continuously improve our safeguards.

10. Retention

We retain personal data for as long as necessary to provide the Services and meet legal obligations. You may request deletion of your account, subject to legal exceptions.

11. International Transfers

Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable laws.

12. Your Rights

  • Access, rectify, or delete your personal data.
  • Object to or restrict certain processing.
  • Data portability, where applicable.
  • Withdraw consent where processing is based on consent.

Requests can be submitted via the platform's support channels. We will respond in accordance with applicable laws.

13. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal data from them.

14. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email where appropriate.

15. Contact

For privacy inquiries, please contact us using the platform's support channels.