Legal
Privacy Policy
Last updated October 25, 2026
We collect as little as we need to run Crayon MBA, we never sell your data, and we don't use advertising trackers. Here's exactly what we keep and why.
What we collect
- Account details: your name and email. If you sign up with a password, we store only a salted, slow hash of it, never the password itself.
- Sign-in with Google or GitHub: your account ID, name and email from that provider. We never see your Google or GitHub password.
- Learning progress: lessons and questions you've completed, quiz scores and daily activity (for your streak and XP).
- Payments: handled by Stripe. We store your Stripe customer ID and your plan. Your card details never touch our servers.
- Security logs: IP addresses and timestamps of login attempts, kept briefly to stop password guessing.
The models, simulations and tasks in lessons run in your own browser. Your answers stay there, except whether you finished a lesson and your quiz score, which we save to your account.
Cookies and storage
- One essential, secure cookie keeps you logged in. It can't be read by scripts.
- Your browser's local storage remembers preferences like light or dark mode and notes you write in practice tools.
- No advertising or cross-site tracking cookies.
Who processes data for us
- Cloudflare: hosting, database and security.
- Stripe: payments and billing.
- Google and GitHub: only if you choose to sign in with them.
- Our email provider: for password resets and account emails.
Each of them is only allowed to use your data to provide their service to us.
How long we keep it
We keep your account data while your account exists. When you ask us to delete your account, we delete your profile and progress. Payment records may be kept as long as tax and accounting law requires.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account at any time by emailing hello@crayonmba.com. Depending on where you live (for example under GDPR or CCPA), you may have further rights, and we'll honour them.
Children
Crayon MBA is for people aged 13 and over. If you believe a younger child has created an account, contact us and we'll delete it.
Changes and contact
If we change this policy in a way that matters, we'll update the date above and let members know. Questions: hello@crayonmba.com.