Skip to main content

Privacy

Short version: we collect as little as we possibly can: no accounts, no cookies, no cross-site tracking. Just privacy-preserving visit counts, plus the optional forms and the optional AI tutor if you choose to use them (details below).

  • No accounts. You can complete the entire course without signing up for anything on this site.
  • Privacy-preserving, cookieless analytics. To understand which material is useful, we use server-side analytics: our host counts page requests from its own standard server logs. It runs no scripts in your browser, sets no cookies, and uses no advertising pixels, doesn't track you across other websites, and doesn't build a profile of you. We see aggregate counts (which pages are visited, roughly from where), not individuals.
  • Optional forms. The report-a-concern form, the partnerships enquiry form on our support page, and the showcase submission form are the only places on this site where what you type is sent to us. (Anything you write inside a module or an engagement stays on your device.) What you submit is delivered privately to the maintainers by our hosting provider and used only to handle your message. Report and partnership enquiries are never published. The showcase form is the single exception, and only because you ask us to: it requests your explicit consent to publish the name and link you provide, a maintainer reviews every submission by hand before anything appears, your email is never published, and you can ask us to remove your entry at any time.
  • Your learning progress stays on your device. Quiz scores, flashcard reviews and module completion are stored in your own browser (localStorage) and are never transmitted to us. We can't see them. You can export or erase them any time on your progress page. Clearing your browser data clears them too.

The course links to third-party learning platforms (for example TryHackMe, PortSwigger Web Security Academy, Microsoft Learn). If you create accounts there, their privacy policies apply. We receive nothing from them about you.

Hosting​

This is a static website served by a hosting/CDN provider, which may process standard technical request data (such as IP addresses) to deliver pages and protect against abuse, per its own policy.

If this ever changes​

If we ever add optional accounts or progress sync, we will: keep them strictly optional, collect the minimum possible, store data in Australia, comply with the Australian Privacy Principles, and update this page before anything ships.

The optional AI study tutor​

The site has an optional AI study tutor ("Sentry") to help explain the course material. It applies only if you choose to use it. The whole course works without it:

  • The messages you type into the tutor are sent to our AI provider (Anthropic) to generate a reply. The rest of the site behaves exactly as described above: no accounts, no cookies, just the privacy-preserving visit counts.
  • Don't type real passwords, credentials, or personal details into the tutor. It won't ask for them and will remind you not to.
  • We don't keep your tutor conversations: no accounts, no saved chat history on our side. Your conversation is gone once you close the tab.
  • We don't use your conversations to train AI models, and we don't sell them.
  • The tutor is completely optional. The whole course works without it.

See How we use AI for the full detail: what it can and can't do, its limits, and how we keep it safe and accountable.

Last updated: 12 July 2026.