CobraByte Privacy Notice
Version 1.0. Effective [date].
The short version
- We keep your name, birthdate, gender, email, username and your learning progress so CobraByte can work for you.
- Your mentors and the admins can see your progress and the code you run in the sandbox.
- We do not sell your information and we do not show ads.
- You can ask to see, fix or delete your information at any time.
- If you are under 18, show this page to your parent or guardian. They need to agree too.
1. Who we are
CobraByte is run by [group or school name], [address]. Our contact person for privacy matters is [name], [contact email].
2. What we collect
| What | Details |
|---|---|
| Account details | First name, last name, birthdate, gender, email address, username, password (stored hashed), optional profile photo |
| Learning record | Lessons opened, answers, scores, retakes, time spent, lives, badges, certificate |
| Sandbox code | Snippets you save, and the code and output of each run |
| Security records | Date and time of sign-in attempts, whether they succeeded, the IP address used, lockouts, password reset dates |
| Consent record | Which version of the Terms and this notice you accepted, and when |
3. Why we collect it
To create and secure your account, send verification and reset codes, show your lessons and track progress, recommend what to review, award badges and the certificate, let mentors and admins support learners, produce reports about how the course is used, and protect the system from misuse.
4. Our basis for using it
Your consent, given when you tick the box at sign-up or on the consent screen. For learners under 18, the consent of a parent or guardian, which the learner confirms by ticking the parent or guardian box. You may withdraw consent at any time; we will then close your account, because CobraByte cannot work without this data.
5. Cookies, login token and browser storage
When you sign in, we place a session cookie containing a random session token in your browser. It keeps you signed in and ends when you log out or after a period of inactivity. Your browser also stores a signed-in flag for the open tab and display preferences such as the theme. We do not use advertising or tracking cookies.
6. Who can see your data
You. Mentors and admins of CobraByte, for teaching, support and security. We do not sell or rent personal data, and we do not share it with anyone else unless the law requires it.
7. Outside services
Verification emails are sent through Gmail, which receives your email address and the code. Lesson videos play from YouTube, which may set its own cookies and receives your IP address. Fonts, icons and the in-browser Python engine load from Google Fonts, cdnjs and jsDelivr, which receive your IP address. The site runs on a server from [hosting provider], located in [country].
8. How we protect it
Passwords are stored hashed. Access to learner data is limited to mentor and admin accounts. Accounts lock for a short time after repeated failed sign-ins. [The site uses HTTPS so data is encrypted in transit. Include this sentence only once it is true.]
9. How long we keep it
Account and learning data: while your account is active, and deleted or made anonymous [2 years] after your last sign-in. Security records: [1 year]. When you ask us to delete your account, we delete it within [30 days], except records we must keep by law.
10. Your rights
Under the Data Privacy Act of 2012 you have the right to be informed, to object, to access your data, to correct it, to have it erased or blocked, to get a copy in a common electronic format, to claim damages, and to file a complaint with the National Privacy Commission. To use any of these, write to [contact email]. We will reply within [15 days].
11. Children
CobraByte accepts learners from age 13. Learners under 18 confirm that a parent or guardian has read and agreed to the Terms and this notice. If a data breach affects a learner under 18, we will notify both the learner and the parent or guardian where we can reach them.
12. If something goes wrong
If a breach puts your data at real risk of serious harm, we will notify you and the National Privacy Commission within 72 hours of learning about it.
13. Changes to this notice
If this notice changes, we will show you the new version and ask you to agree again before you continue.
14. Contact and complaints
[Contact person], [contact email]. You may also contact the National Privacy Commission at privacy.gov.ph.