Last updated: March 21, 2026
This Privacy Policy describes how zero2claude.dev ("the Service") collects, uses, and protects your personal information. The Service is operated by an individual (Itay), not a corporation.
When you register, we collect:
| Data | Purpose |
|---|---|
| Email & password | Account authentication and login |
| Display name & profile image | Shown in forum posts, peer help, and your profile |
| Lesson progress & streaks | Track your learning journey, unlock achievements |
| AI background description | Generate a personalized learning plan via AI |
| Forum posts & votes | Operate the community forum |
| Peer help messages | Facilitate real-time help between students |
| Bug reports | Investigate and fix issues in the Service |
| Analytics data | Understand how the Service is used, improve features |
We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as described below.
The Service uses the following third-party services that may process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Analytics 4 + Google Tag Manager | Usage analytics | Anonymized page views, interaction events, device info |
| Cloudflare Turnstile | Bot protection on registration | Device/interaction signals (no CAPTCHA images) |
| Anthropic (Claude API) | AI learning plans, palette generation, bug triage | Your self-described background text (for onboarding); theme hints (for palettes) |
| Google (Gemini API) | Alternative AI provider | Same as Anthropic (when selected as provider) |
| Render | Hosting (frontend, backend, database) | All data is stored on Render's infrastructure |
| GitHub | Bug report issue tracking | Bug report content (may include your email for follow-up) |
Each third-party service is subject to its own privacy policy. We encourage you to review them.
| Cookie | Purpose | Duration |
|---|---|---|
| accessToken | JWT authentication (httpOnly, secure) | 15 minutes |
| refreshToken | JWT session renewal (httpOnly, secure) | 7 days |
| _ga, _gid | Google Analytics tracking | Up to 2 years |
Authentication cookies are httpOnly, meaning they cannot be accessed by JavaScript and are only sent to our server over HTTPS.
While we take reasonable measures to protect your data, no system is perfectly secure. The Service is operated by one person on hosting infrastructure with standard security practices.
Your data is retained for as long as your account exists. Specifically:
To request deletion of your account and associated data, contact us at the email below. We will process deletion requests within 30 days.
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.
You have the right to:
If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR, including the right to object to processing and the right to data portability.
We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Last updated" date at the top of this page. We encourage you to review this page periodically.
For privacy questions, data requests, or concerns, contact: itay@zero2claude.dev
This Privacy Policy is provided for informational purposes and is not a substitute for professional legal advice.