Web Sprint
Privacy Policy
Last updated September 25, 2026
The short version: we collect only what the course needs to work: your name, your email, your lesson progress, and a record of your purchase. We never see your card number, we don't use ads or trackers, and we never sell your data. Email esdrasbuelvas31@gmail.com any time to see or delete your data.
Who we are
Web Sprint is an online course at esdrasbuelvas.org, run by Esdras Buelvas. In this policy, "we" and "us" mean Web Sprint. You can reach us at esdrasbuelvas31@gmail.com.
What we collect
- Your account: the first name and email address you sign up with, and your password. Passwords are handled by Google Firebase Authentication. We never see or store your password ourselves.
- Your progress: which checklist items you've ticked in each lesson and your quiz and test scores, so your progress follows you between devices.
- Projects you turn in: if you ask for AI feedback on a project, the code files you upload are sent to our server and to an AI model (run by Cloudflare, or Anthropic's Claude) to be reviewed. We keep the feedback, your score and the names of your files, but not the code itself. Don't put passwords or personal information in files you upload.
- Help chat messages: messages you send with the Help button, your name and email, and which lesson you were on, so we can answer you.
- Module reviews: the star rating and comments you leave after a module test. If you tick the box to share it, your rating, the "what did you like" comment and your first name may be shown on our homepage. You can ask us to remove it any time.
- Your purchase: when you buy the full course, our payment processor, Square, tells us the email address used at checkout, a payment ID, the amount and the date. We use this to unlock your lessons.
- Basic account activity: when you created your account and when you last used it.
What we don't collect
- Your card or bank details. Payments are handled entirely by Square, and card details never reach us.
- Advertising or tracking data. There are no ad trackers or tracking pixels on this site. We may use Cloudflare Web Analytics to count visits and see which pages are used. It doesn't use cookies or track you across other sites.
How we use it
- To create your account and log you in
- To save your progress and show your certificate
- To unlock the full course after you pay, and remove access if you're refunded
- To answer you when you contact us or use the help chat
- To improve the course using your reviews, and to show shared reviews on the homepage
- To review projects you turn in and show you the feedback
- To count how many people sign up and buy, so we can improve the course
We don't send marketing emails unless you ask for them. We never sell or rent your personal information.
Services we use
These companies process some data on our behalf, under their own privacy policies:
- Google Firebase stores your account and progress. Firebase privacy
- Square processes payments. Square privacy
- GitHub Pages hosts the website and may log visitors' IP addresses for security. GitHub privacy
- Cloudflare runs the small server that receives payment notifications from Square and sends projects for review. Its Workers AI service may run the AI that reviews your projects. Cloudflare privacy
- Anthropic provides Claude, which may review projects you turn in. Anthropic doesn't use data sent through its commercial API to train its models by default. Anthropic privacy
- Discord hosts our optional student community. Joining is up to you, and anything you post there is covered by Discord's own terms and privacy policy.
- Google Fonts serves the fonts on this site, so your browser connects to Google when pages load.
- YouTube hosts lesson videos. Videos use YouTube's privacy-enhanced mode, but YouTube may still collect data when you play one.
Cookies and browser storage
We don't use advertising or tracking cookies. Firebase stores a login token in your browser so you stay logged in. Clearing your browser data logs you out.
How long we keep it
We keep your account, progress and purchase record for as long as your account exists. If you ask us to delete your account, we delete your account and progress. We may keep a basic record of payments where the law requires it, for example for taxes.
Your choices and rights
Email esdrasbuelvas31@gmail.com from your account's email address to:
- Get a copy of the data we have about you
- Correct your name or email
- Delete your account and data
We'll reply within 30 days. Depending on where you live, you may have extra rights under local law, and we'll honor them.
Children
Web Sprint is meant for people aged 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we'll delete it. If you're under 18, please make sure a parent or guardian is okay with you using the site and making a purchase.
Security
Your data is stored with Google Firebase and protected by security rules, so each student can only read their own progress and paid lessons are only available to buyers. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll let account holders know by email.