Legal
Privacy policy
This policy explains what we collect, why, and the choices you have. We keep it short on purpose.
Last updated: 2 June 2026. Data controller: SkillForge, a sole trader based in Leicester, England. Contact: Skillf@protonmail.com.
1. Who we are
SkillForge ("we", "us") provides an online learning platform. We are the "data controller" responsible for your personal data under the UK GDPR and the Data Protection Act 2018. If you are in the EEA, the EU GDPR applies on equivalent terms.
2. The data we collect
- Account data — your name, email, and a securely hashed password (or, if you use Google sign-in, the basic profile your provider shares).
- Learning data — which lessons you open and complete, and your progress, so we can save your place and recommend what to learn next.
- Billing data — if you subscribe, your plan and payment status. Card details are handled entirely by our payment processor (Stripe); we never see or store your full card number.
- Technical data — limited information your browser sends, such as device type and approximate region, used to keep the service secure and working.
- Communications — messages you send us via the contact form or email.
3. How and why we use it (legal bases)
- To provide the service — creating your account, saving your progress, and managing free and paid plan access. Legal basis: performance of a contract.
- To process payments — managing subscriptions and renewals via Stripe. Legal basis: performance of a contract.
- To keep the service secure — preventing fraud and abuse. Legal basis: legitimate interests.
- To contact you — service emails (e.g. password resets, receipts) and, only with your consent, marketing. Legal basis: contract / consent.
4. Who we share it with
We do not sell your personal data. We share it only with the providers that run the platform, acting as our processors:
- Supabase — authentication and database hosting for your account and learning data.
- Stripe — payment processing and subscription management.
- Our hosting & email providers — website hosting and transactional email delivery.
We may also disclose data where required by law, or to protect our rights, our users, or the public.
5. Cookies and local storage
We use your browser's local storage (a cookie-like technology) to keep you signed in and to remember your progress through lessons. These are strictly necessary for the service to function. We do not currently use third-party advertising or analytics trackers. If that changes, we will update this policy and request consent where required.
6. International transfers
Some providers process data outside the UK/EEA. Where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
7. How long we keep it
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we must retain certain records (such as billing records) to meet legal obligations.
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to processing, request portability, and withdraw consent at any time. To exercise any of these, email Skillf@protonmail.com. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority.
9. Children
SkillForge is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the "Last updated" date. Significant changes will be notified by email or an in-app notice.
11. Contact
Questions about this policy or your data? Email Skillf@protonmail.com or use our contact page.
This page is a starting template and is not legal advice. Have it reviewed by a qualified solicitor before you rely on it.