Privacy Policy

The current learning website

Beyond the Login is an independent educational project based in Arizona, United States. This policy explains how we handle information on this learning website. You can read its lessons and complete its quizzes without creating an account.

Your account

When you register, we collect your first name, last name, country, email address, and password. We store a salted password hash instead of your password. Cloudflare hosts the account database. Your profile displays your name, country, email address, and the date you joined.

Zoho delivers registration and password reset emails from [email protected]. We send Zoho your email address and the message, with email open and click tracking disabled. Codes and links expire after one hour, and using either one invalidates both. Account pages do not load our optional analytics script. If registration is requested for an existing account, we send a sign-in notice without changing the account.

Necessary cookies keep you signed in for up to seven days and connect registration to your browser for up to three hours and ten minutes. A separate pending-link cookie lets you refresh a verification page without reopening the email. It lasts until ten minutes after that link's expiry, for at most 70 minutes, but cannot extend the link's verification window. We store session digests and keyed counters derived from email addresses and IP addresses to limit automated attempts. Expired sessions, registration records, and counters are removed in bounded cleanup batches. Registration records become eligible for deletion one day after their verification window expires. Account details remain until the account is deleted. Contact us below to request access, correction, or deletion.

Account and tenant activity

We record authentication attempts and account email submissions to investigate problems and protect accounts. These records include the time, action, outcome, request ID, account identifiers, IP address, and browser and operating-system categories. A keyed digest of a submitted email address lets us find attempts made before an account existed. Email-provider acceptance does not confirm arrival in your inbox. We do not record passwords, verification codes, links, cookies, or API keys in activity records.

Your account activity page shows your retained history. BTL Admins can search account history for support; that access is recorded. Tenant creation and role assignments are also recorded. Searchable activity expires after 30 days and is deleted in scheduled batches. Your tenant membership and resource records remain while the tenant exists.

A necessary password reset cookie remembers the selected email link for up to 70 minutes, including ten minutes to check the result after the one-hour reset window expires. Reset requests become eligible for deletion ten minutes after expiry.

Checking new passwords

We check new registration and reset passwords against Have I Been Pwned's Pwned Passwords service. We send only the first five characters of a SHA-1 hash and compare the returned candidates on our server. We do not send your password, full hash, email address, or browser cookies to that service. If the check cannot be completed, registration is temporarily unavailable; existing sign-in continues to work. Password storage uses Argon2id, separately from this check.

Preferences and quiz progress

The website uses your browser's local storage to remember your light or dark theme and which quiz questions you have answered correctly. The quiz code does not send your answers or saved progress to us. Progress belongs to that browser and does not sync between devices.

You can reset a lesson's quiz using its reset control, or remove all saved preferences and progress by clearing this website's site data in your browser. Local storage remains until you or your browser removes it; blocking it may prevent preferences and progress from being saved.

Delivering and protecting the website

Cloudflare hosts and delivers the website. When you visit, Cloudflare processes technical request information such as your IP address, the URL requested, and browser or device information to deliver traffic and protect its services. This is separate from the quiz progress stored in your browser.

Cloudflare operates a global network, so information may be processed outside your country. Its handling of information is described in Cloudflare's Privacy Policy.

When you contact us

If you email us, we receive your email address and the information you include. We use that information to respond, investigate issues, and manage the conversation. Our email provider also processes the message to deliver and store it. Please do not send passwords, private keys, access tokens, or sensitive personal records.

We keep correspondence only as long as needed for those purposes or to meet legal obligations. Information may also be disclosed when required by law or necessary to address abuse or protect people's rights and safety.

Analytics and advertising

When configured and with your permission, we use Cloudflare Web Analytics to understand visits and improve site performance. It reports page views, referrals, browser and device categories, and performance measurements. It does not receive your quiz answers or saved progress from our quiz code. You can reject analytics or change your choice using Cookie settings in the footer. Our Cookie Policy explains these choices and the browser storage used by the site.

We do not currently show advertising or use advertising trackers. If we introduce partnerships or advertising, we will update these policies before introducing new data uses and provide any required choices. Allowing analytics does not authorize advertising tracking.

Your choices and questions

Contact [email protected] to ask about information you have shared with us or request access, correction, or deletion. The rights available to you depend on applicable law. We may need to verify a request before acting on it. We cannot retrieve quiz progress that exists only in your browser.

We will revise the date above when this policy changes and describe material changes in the changelog.