Privacy

What this site does with your data

Plain-English summary of every place this site collects data, where it lives, and how to delete it. Last updated 2026-05-18.

Reference site (everything outside /learn)

Reading the stack pages, the glossary, grants, news, or about page: no data collected. No analytics, no cookies, no session tracking, no IP logging beyond what the hosting provider (Vercel) does for delivery.

In-site chat agent

The chat bubble bottom-right is pure BYOK (bring your own key). Your API key (Anthropic or OpenRouter) is stored in your browser's localStorage. Chat threads are stored in localStorage. Nothing leaves your browser except direct API calls from your browser to the provider you chose; we do not proxy those calls and never see them.

Course at /learn

The course collects the data needed to track your progress and build your Personal Notes document. Specifically:

• Email address and password: held by Supabase to authenticate you across devices. Your password is hashed; we cannot read it.
• Display name (optional): if you set one, used on your Personal Notes export. Default is the local part of your email.
• Module progress: which modules you've started, which phase you're in, completion timestamps.
• Your writings: the synthesis paragraphs and "why open source matters" answers you write during the course. These are your work, attributed to you, and saved so you can export them as your Personal Notes at the end.
• Course chat turns: the dialogue with the course agent during the Probe and Compare phases. Stored so you can resume mid-session and so the agent has context for follow-up questions in the same module.

All course data is stored in a Supabase Postgres database under this site's project. Row-level security ensures only you can read or modify your own rows. No third parties have access; no analytics, no advertising, no profile sales.

Anonymous course use

You can use the course without signing up. In that mode, your writings live in your browser's localStorage. Closing the tab typically loses them. If you sign up later, the signup flow reads your localStorage and writes your stashed writings into your new account, so nothing is lost in transition.

Exporting and deleting your data

Visit /learn/profile to export your Personal Notes as Markdown or PDF, or to delete your account. Deleting your account cascades to all your progress, writings, and chat turns. The deletion is immediate.

Cookies

The reference site sets no cookies. The course uses a Supabase auth session cookie (when you're logged in) plus a CSRF cookie for form submissions. Both are HttpOnly and SameSite=Lax.

What this site does not do

No advertising, no tracking pixels, no third-party analytics, no data sales, no profile-building beyond what the course needs to render your own progress to you.

Contact

For privacy questions, file a GitHub issue at github.com/Beige-Coffee/open-source-ai.