Privacy Policy

Who we are

Dasow Academy is run by Dasow, a studio in Costa Mesa, California. For anything on this page, write to [email protected] or call (844) 553-2769 during Monday to Friday, 8 AM to 5 PM Pacific.

What we collect

Your email address, if you sign in

You can read every course without an account. If you want your progress and your certificates to follow you to another device, you sign in. There is no password. You give us an email address, we send a single-use link that works once and expires in fifteen minutes, and clicking it starts a session. We store your address, the sign-in links we issued, your sessions and the name you choose to put on a certificate.

Your progress and your certificates

Stops you have marked done, quiz attempts and their scores, and the certificates you have earned are stored against your account. Before you sign in, the same progress lives in your own browser. Signing in merges it up.

A cookie that tells one browser from another

We set a first-party cookie called academy_guest. It holds a random identifier, nothing about you, and it lets us count visitors, attach a bug report to the person who filed it, and keep guest progress separate. A session cookie is set as well while you are signed in.

Analytics we run ourselves

Page views, clicks, video plays, quiz results and similar events are recorded in our own database on our own server. An event carries the page, the guest identifier, your account id if you are signed in, the referring page and your browser's user agent string. We use it to see which courses are read and where people get stuck.

Bug reports and feedback

If you use the Feedback button, we store what you wrote, the page you were on, your browser details, an optional screenshot you attach and an optional email address so we can reply. Send a screenshot only if you are happy for us to see whatever is on it.

The contact form

The name, email, message and optional company you send through the contact page are stored and emailed to us so we can reply. We use them to answer you and for nothing else.

Google Tag Manager

Every page loads Google Tag Manager, container GTM-P977P3VZ. Tag Manager may in turn load Google Analytics and similar measurement tags. Those tags are Google's, run in your browser, and can set their own cookies and see your IP address, the page you are on and how you move through the site. Google's handling of that data is covered by Google's privacy policy. Browser settings, an ad blocker or Global Privacy Control can block these tags, and the site works fine without them.

Certificate pages are public on purpose

A certificate is only worth something if somebody else can check it. A verification page at /verify/ shows the name on the certificate, the course and the date it was issued to anyone who has the certificate id. If you would rather your name did not appear there, turn that off in your account settings, or ask us to delete the certificate.

Who else touches your data

• Cloudflare sits in front of the site and handles DNS, TLS and abuse filtering. Requests pass through it.
• The site and the database run on Oracle Cloud Infrastructure in the United States.
• Email, including sign-in links, certificates and contact form messages, is sent through Microsoft 365.
• Google receives whatever the Tag Manager tags above collect.

We do not sell your data, we do not rent it, and we do not hand it to advertisers. We give it up only if the law requires it.

How long we keep it

• Analytics events are deleted automatically after 180 days, about 6 months.
• Sign-in links expire in fifteen minutes and are single use.
• Accounts, progress and certificates are kept until you ask us to delete them.
• Bug reports, screenshots and contact messages are kept while they are useful and deleted on request.

Your rights

Email [email protected] from the address on the account and you can ask us to:

• tell you what we hold about you,
• send you a copy of it,
• correct anything wrong,
• delete your account, your progress, your certificates and your analytics events.

We answer within thirty days. We do not charge for it, and we will not treat you differently for asking.

California residents

If you live in California, the CCPA gives you the rights above by name: to know, to access, to correct, to delete and to be free from retaliation for exercising them. Use the same email address and say what you want.

Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of, because we never opted you in. If you would rather the measurement tags did not run at all, block them in your browser or send a Global Privacy Control signal.

Children

This site is written for people at work. One course, AI for Kids, is meant to be taken by a child sitting with a parent or guardian, and the account, the email address and the certificate belong to the adult. We do not knowingly collect personal information from a child under 13. If you believe a child has given us any, write to [email protected] and we will delete it.

Security

The site is served over HTTPS. Session and guest cookies are HTTP-only. Sign-in links are stored hashed, expire quickly and cannot be reused. No system is perfect, so we keep the amount we hold small on purpose.

Changes

If this policy changes we update the effective date at the top of the page and the copy underneath. Material changes are announced on the site.