Privacy Policy

What we collect

• Your Google account basics. When you sign in with Google we receive your name, email address, profile picture, language and Google account id (the openid email profile scopes). Nothing else from your Google account: not your contacts, files, mail or calendar.
• Your learning progress. Lessons and exercises you finish, your streak, XP, badges, settings and the code you write in exercises and the playground.
• How you use the app. Pages you open and steps such as starting or finishing a lesson, linked to your account, so we can see where learners get stuck and improve the courses.
• Sign-in sessions. For each device you sign in on: when, the browser's user agent and the IP address, so you stay signed in and we can stop abuse.
• Crash reports. If the app breaks, your browser sends the error, the last few steps before it, and a short replay of the screen with everything you typed hidden. Replays are deleted after 30 days, the reports after 90.
• Notifications, if you turn them on. Your browser's push address for this device, your time zone and the hour you chose for reminders.

How we use it

• To sign you in and keep your progress on every device.
• To show your name and picture inside the app, and on a share card only when you choose to share one.
• To send the reminders and announcements you asked for. You can turn them off in Settings at any time.
• To find and fix bugs and to make the courses better.

We don't sell or rent your data, use it for advertising, or use it to train AI models.

Google user data

Sikau's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used only to sign you in and to show your name and picture in Sikau, and is not shared with anyone else.

Cookies and storage on your device

We set one cookie, sikau_session, which keeps you signed in. There are no advertising or third-party tracking cookies. The app also stores your progress and the course files in your browser so it opens quickly and works offline; signing out clears your personal copy.

Who else handles it

• Google, for signing in.
• Your browser's push service (for example Google, Apple or Mozilla) delivers notifications if you turn them on.
• Our own server, where the app and its database run. Error alerts sent to the maintainer contain the error message and page, not your progress.

The code you run in lessons runs in your own browser, not on our server.

How long we keep it

Your account and progress are kept while you use Sikau, so you never lose your work. We keep regular database backups for the same reason. Crash reports are deleted after 90 days. Signed-out sessions are removed.

Your choices

• Reset your progress from Settings, and sign out on any device.
• Turn notifications off in Settings, or in your browser.
• Ask for a copy of your data, a correction, or for your account to be deleted, by emailing [email protected] from the address you sign in with. We'll do it within 30 days, and your details won't be restored from backups afterwards.
• You can also remove Sikau's access in your Google account under Security → Third-party connections.

Children

Sikau is for people aged 13 and over. If you're younger, please use it only with a parent or guardian. If you believe a child under 13 has given us personal data, email us and we'll remove it.

Security

Connections are encrypted (HTTPS). Sign-in tokens are stored only as hashes, and the database is reachable only from the server. No system is perfectly secure, but we'll tell affected learners promptly if something goes wrong.

Changes

If this policy changes in a way that matters, we'll update the date above and tell you in the app.