Privacy notice

Your account

When you create an account we store your name, email address, and your password in hashed form (the plaintext password is never stored or logged). Your role (student, instructor, administrator) and email-verification status are stored with the account.

Sign-in uses a session cookie that is checked against a server-side session record; sessions expire and can be revoked by logging out or changing your password.

Profile, learning and notes

• Your profile information (bio, location, languages, interests, learning goal, weekly hours) is stored with your account.
• Your profile can be public or private. A public profile shows only basic information — never your email, progress, notes or activity.
• Lesson progress, watched time, quiz attempts and per-lesson notes are stored against your account and are visible only to you (and the instructor/administration for course administration).
• Certificates you issue are public by design: anyone with the certificate code can verify the course, learner name and issue date.

Orders and coupons

Orders you place (courses, amounts, status, coupons used) are stored server-side and are visible to you and to academy administration. Payment failures and refunds are recorded as order events.

Reviews, discussions and messages

• Course reviews you write display your public name next to the rating.
• Discussions and replies are visible to learners enrolled in the course.
• Direct messages are private between you, the recipient and academy administration; they are delivered in-app only.

Payments and card handling

Verdant never collects or stores card numbers. When an order requires payment, you are redirected to the payment provider's own hosted page; the provider confirms the outcome to the academy server through a signed notification. The academy stores only the order, its status and the provider's payment reference.

Development environments: when the server runs with development payments enabled, an order can be completed through a clearly-marked development button and no payment occurs. Such orders are development artifacts, not purchases.

Cookies

The platform uses an essential cookie for your signed-in session and a language-preference cookie when you choose a language. The language cookie contains only your locale, not credentials, and lasts one year. Mutations additionally require a cross-site-request-forgery token bound to that session. There are no advertising, analytics or third-party tracking cookies.

Retention, deletion and formal policy

Account deletion, data-retention periods and data-processing agreements have not been defined yet. These are business decisions the academy owner must approve before any paid launch; nothing on this page should be read as such a commitment.

A formally reviewed privacy policy should replace this notice before the platform sells paid enrollments. Questions in the meantime can be raised through in-app messaging.