Privacy policy

Last updated: 8 November 2026

What we collect

• Account identity: the email address you verify, plus a Clerk user identifier. Sign-in is handled by Clerk; we never see your password, and a Google sign-in only returns your email and a stable identifier.
• Purchase record: order id, amount, currency, payment status and the email the receipt was issued to. Card data stays with Stripe.
• Learning progress: which protocols and steps you have completed, stored against your account when you are signed in and in local storage when you are not.
• Product analytics: anonymous page and interaction counts that tell us which lessons people abandon. We do not record keystrokes, and we do not replay lesson content.

What we do not collect

No packet captures, no browsing history outside this site, no device fingerprinting beyond what the analytics tag reports, and no data sold to third parties.

Cookies and local storage

A session cookie keeps you signed in. Local storage remembers your theme, interface language, playback speed and, if you are signed out, your progress. Clearing site data removes the local copy; if you have an account, the server copy stays.

Processors

Clerk (authentication), Stripe (payments), Cloudflare (hosting and database), and Microsoft Clarity (aggregated product analytics). Each receives only what its function requires.

Your choices

You can request a copy or deletion of your account data, and you can unsubscribe from any optional email, by writing to support@protocolexplorer.run. Deleting an account removes the entitlement, so export anything you need first.

Children

The service is intended for students old enough to hold an email account under their local rules, or for use in a classroom setting supervised by an adult.