Privacy Policy

StevenCodeCraft is run by Steven Garcia. This page explains what the site collects, who else handles it, and what you can ask for.

What's collected

• Account details — your name, email address and a hashed password. Plain passwords are never stored.
• Purchase details — a Stripe customer reference and what you bought. Card numbers go straight to Stripe and never reach this site's servers.
• Learning activity — which lessons you've completed, your answers to study questions, code you submit to coding challenges, and any comments you post.
• Email preferences — your address and opt-in status if you subscribe to the newsletter or join a waitlist.
• Usage data — pages visited, approximate location, device and browser, collected by the analytics tools below.

Who processes it

These are the third-party services the site actually uses. Each one handles data on StevenCodeCraft's behalf and has its own privacy policy.

Your information is never sold, and it isn't shared with anyone beyond the services above except where the law requires it.

Session recording (Hotjar)

Hotjar goes further than page-view analytics: it records how you move through a page — clicks, scrolling, mouse movement — and builds heatmaps from it. It's used to find parts of the site that confuse people. You can opt out of Hotjar across every site that uses it from Hotjar's do-not-track page.

Cookies and analytics

Signing in sets a session cookie — without it the site can't keep you logged in. Google Analytics, Hotjar and Vercel Analytics load when you open a page and set their own cookies or identifiers. There is currently no cookie consent banner on the site, so if you'd rather not be measured, use your browser's cookie and tracking controls, the Google Analytics opt-out add-on, or the Hotjar link above.

Marketing email

You only receive marketing email if you opted in. Every one of those emails has an unsubscribe link, and unsubscribing takes effect immediately. Transactional email — password resets, purchase confirmations — is sent regardless, because it's part of running your account.

How long it's kept

Account and learning data is kept while your account exists, so your progress and purchases survive. Payment records are kept by Stripe for as long as tax and accounting rules require. Ask for deletion and your account data is removed, apart from records that have to be retained for those rules.

Your rights

Wherever you live, you can ask for a copy of the data held about you, ask for it to be corrected, or ask for your account and its data to be deleted. If you're in the EU, UK, California or another region with its own privacy law, those rights are yours by statute and the same request covers them. Email stevencodecraft@gmail.com from the address on your account and it'll be handled by hand.

Children

The site isn't intended for children under 13, and accounts aren't knowingly created for them.

Contact

Privacy questions go to stevencodecraft@gmail.com. See also the Terms of Service and Refund Policy.

Last updated: September 25, 2026