Privacy policy
Last updated . Short version: we keep what is needed to run your account and track your progress, never sell data, and delete everything when you delete your account. Questions: hello@cracked.guide.
What we keep
- Account: your email address, handle, name, and a hashed password (or the Google or GitHub account you sign in with), and two-factor settings if you turn them on.
- From Google or GitHub: your verified email, name and profile picture address, and from GitHub your username, which we use to look at your public repositories when you ask us to check your work. We ask GitHub for no access to your repositories.
- Your path: the start date you pick, what you mark done, and whether your profile is public in the community.
- Sessions: a login cookie that lasts up to 30 days, the device and rough location of each session (so you can see and end them in Settings), and the time you were last seen.
- Where you came from: when you sign up, the site that sent you and any campaign tags in the link, and the country and region of the connection, so we know what is working.
Public profiles
Profiles are public by default so the community can see who is on the path: your handle, name, picture and progress. Turn "Public profile" off in Settings and none of it is shown.
Cookies
No tracking or advertising cookies. The site sets only the login cookie when you sign in and a short-lived cookie that protects Google and GitHub sign-in. Your light or dark theme choice stays in your own browser's storage. The site may use Cloudflare Web Analytics, which works without cookies.
Who processes data for us
- Cloudflare hosts the site and the database, sends our email (Cloudflare Email Service) and routes mail sent to our addresses.
- Google and GitHub, only if you choose to sign in with them. GitHub's public API is also read for your public repositories when you ask us to check your work.
- Buy Me a Coffee handles anything you choose to give through the "Buy Dane a book" link, on its own site under its own policy. We get nothing from it about your account.
- Mail you send to us is forwarded to our support inbox, which is hosted by Google.
We do not sell personal data or share it for advertising.
Email we send
Account email (confirming your address and reminders to, password resets and security notices) and, once you have a start date, "This week's work" each Monday, which you can turn off in Settings or from the mail itself. Nothing else.
Export and deletion
From Settings you can export your account as JSON at any time. Deleting your account from Settings permanently deletes it, your progress and your sessions. Accounts whose email is never confirmed are deleted after 30 days. To ask what we hold about you, correct it or have it deleted without logging in, write to hello@cracked.guide.
Contact
cracked.guide is a small independent project. For anything about your data: hello@cracked.guide.