Privacy Policy

We keep data collection to the absolute bare minimum needed to run the platform:

• Account Details: When you register on LoopCursive, we store your name, email address, and a securely hashed password (via bcrypt). We never see or store your plaintext password.
• Social & OAuth Sign-In (Google & GitHub): When you choose to sign in with Google or GitHub, we receive basic public profile information permitted by you (your display name, email address, and avatar image). We do not access your private emails, contacts, Google Drive files, or any external account data. LoopCursive's use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
• Contact Inquiries: When you submit a message through our contact form, we collect your name, email address, and message text solely to reply to you.
• Basic Server Logs: Like any web server, standard technical request logs (IP address, browser type, requested file) may be temporarily processed to ensure site security and mitigate malicious attacks.

Your information is used strictly to power your experience on LoopCursive:

• Authenticating you securely when you log in.
• Saving your tutorial progress, course access, and personal bookmarks.
• Sending critical transactional alerts (e.g., password resets or security notifications). We will never spam promotional marketing emails.
• Diagnosing technical glitches and keeping the website fast, reliable, and secure.

LoopCursive does not use invasive third-party tracking cookies or advertising pixels. Instead, we use your browser's local storage for essential features:

• theme: Remembers whether you prefer Dark Mode or Light Mode across page visits.
• loopcursive_auth: Holds your signed authentication session token (JSON Web Token) so you stay logged in.
• loopcursive_bookmarks: Temporarily saves tutorials you bookmark on your device before logging in, which automatically sync with your account once signed in.

You can clear your browser's storage or cookies at any time through your browser settings without breaking fundamental public browsing.

We only integrate third-party services that directly enhance your learning experience:

• OAuth Identity Providers (Google & GitHub): Facilitates fast, one-click authentication. We only exchange authorization codes for identity verification tokens and never share your learning behavior with third parties.
• YouTube: Video embeds are hosted on YouTube. When playing a video, YouTube may set cookies or log analytics according to Google’s Privacy Policy.
• Hosting & Storage: Our application and database are hosted on secure, modern cloud servers adhering to stringent security benchmarks.

We do not share your personal information with third parties for their independent commercial or advertising use.

Regardless of where you live, you have the right to full ownership of your data:

• Access & Export: You can request an export of all data associated with your account.
• Correction: You can edit your profile information at any time.
• Deletion (Right to be Forgotten): You can request full erasure of your account and all associated personal data from our database.

To exercise any of these rights, send a quick note through our Contact page or email us directly.

We employ production-grade security practices to protect your data, including encrypted HTTPS/TLS in transit, strong password hashing with random salt rounds (bcrypt), and secured authentication tokens.

We retain your personal data only for as long as your account remains active or as needed to provide our services. Inactive or deleted accounts have their records promptly purged.

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us: