Privacy
What we collect, why we collect it, who else ever sees it, and how to take it back.
Last updated 2026-09-07.
This is a draft. What it says about how the platform handles your information is accurate. But the operating company, the governing law, a contact address and a minimum age have not been set, and no lawyer has reviewed it. Read it as a statement of intent rather than a contract until that changes.
The short version
- Reading a lesson needs no account and no name.
- An account exists so a credential has someone to belong to. That is why we ask for an email address and confirm it before you can sit a certification exam.
- There are no advertising cookies, no analytics trackers and no third-party scripts on this site. We do not sell anything about you, because there is nothing here to sell and no arrangement under which we would.
- You can download everything we hold about you, and you can delete your account yourself, from your account page.
What we hold
Depending on what you do here, that is:
- Your account. Display name, email address, whether that address is confirmed, interface language, time zone, when the account was made, and a one-way hash of your password. We never store the password itself and cannot recover it.
- Your learning. Which courses you enrolled in, which lessons you completed and when, questions you answered and the answers you gave, exam attempts and their scores, and the skills those answers are evidence of.
- Your credentials. What was issued, when, from which course, its verification code, and whether it has been revoked or has expired.
- What you wrote. Questions you asked the course tutor and its answers, your conversations with Addie, and posts you wrote in a study group.
- Sessions. A random token in a cookie, stored only as its hash, with when it was made and last used.
- If you arrived from elsewhere. An identifier from Atlas Loop Talent or from your employer, so we know which account here is yours there.
We do not keep an advertising profile, a device fingerprint, or a record of pages you browsed while signed out.
What is public, and what is not
One thing here is public by design: a credential, at its verification address. Anyone holding the code can see the title, the skills it proves, when it was issued, and whether it is still valid. That is the point of it — a credential nobody can check is worth nothing. Your email address, your progress, your answers and your scores are never shown there.
Inside a study group, the people who joined that course the same week see your display name and what you posted. Nothing else about you.
What the AI sees
Several parts of this platform use AI, and each is told only what its job needs. We send that material to Anthropic to produce an answer. It is not used to train models.
- The course tutor sees your question and the lessons of the course you asked about.
- Addie sees your message and, when you ask her something about yourself, reads the same records you can read on your own pages. She cannot see anyone else’s.
- The grader sees a written answer and what the question expected, so it can propose a mark. It is a proposal: a person decides, and they mark without being told whose answer it is.
- The analyst sees only counts and rates across many people, never one person.
Every one of those calls is recorded — which agent, which model, how long, what it cost — so the school can see what its machines are doing. Instructors see those records without the material that went into them.
Who else receives anything
- Anthropic — the AI described above.
- Supabase — the database, hosted in the western United States.
- Fly.io — the servers this site runs on.
- An email provider — to deliver confirmation, password reset and invitation messages, when one is configured.
- Atlas Loop Talent — if you came here from there, a credential you earn is sent to your profile: the title, the skills, the code and the verification address. Never your answers, your scores or your attempts.
- Your employer — if an employer assigned you a course, they see that you were assigned it, how far through it you are, and whether you earned a credential. They never see your answers or your scores.
How long we keep it
For as long as you have an account. Sessions expire after thirty days. Links we email you expire in minutes or hours, and each works once.
Taking it back
From your account page you can download a file containing your record, your enrolments, your progress, your attempts and the answers in them, your credentials, your conversations with the tutor and with Addie, your study-group posts and memberships, and the skills we infer from your work.
You can also delete your account there. Deleting asks for your password again, because a stolen session should not be enough to erase someone. It removes your sessions, your conversations, your posts, your attempts and answers, your enrolments and your learning record, and it strips your name and email from what remains. It also revokes any credential you hold, because a credential we can no longer connect to a person is not one an employer should trust. That cannot be undone.
Security
Passwords are hashed with bcrypt. Session tokens are random and stored only as hashes. Every request runs against the database as a role that can only see rows belonging to the person making it, enforced by the database itself rather than by the application asking nicely. Exam content is not readable by any part of the system that does not need it.
Children
A minimum age has not been set for this platform yet. Until it is, this section is incomplete.
Asking us
Write to the address published on this page once it is set. the operator of Atlas University is responsible for what is described here.
This page is published in English only. Translating it would risk changing what it means, and what it means matters more than its convenience.