Privacy Policy
Last updated: October 16, 2026
1. Who is responsible
Foothold is operated by Chigozie Ezemba, based in Alberta, Canada. For any privacy question or request, email guzee003@gmail.com. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. What we collect
- Account details: your username and your password. We store only a securely hashed version of the password and of your recovery code, never the originals.
- Google sign-in (if you use it): your Google account ID and email address.
- Learning progress: which questions you've solved, your points, and when you solved them.
- Subscription details (if you subscribe): your plan, your Stripe customer and subscription references, the subscription status, and the renewal date. We do not receive or store your card number. Stripe collects and holds your payment details, plus any billing name or address it asks for at checkout.
- Sign-in session: a secure cookie that keeps you signed in. We store only a scrambled (hashed) version of it.
- Technical data: your IP address is used briefly to prevent abuse, for example rate-limiting password guessing. Our server logs may record it for security and troubleshooting.
- On your own device: the lab pages remember your step-by-step progress in your browser's local storage. This stays on your device and is never sent to us.
3. Why we use it
- To run your account, save your progress and show the leaderboard.
- To provide Foothold Pro: knowing whether your subscription is active, and processing payments, cancellations and refunds.
- To keep the site secure and prevent abuse.
- To answer you when you contact us.
We don't sell or rent your information, and we don't use it for advertising.
4. What's public
If you appear on the leaderboard, your username, points and number of solved questions are visible to everyone. Choose a username you're comfortable showing.
5. Who we share it with
We share information only with the service providers we need to run Foothold, and only for that purpose:
- Stripe: payment processing and subscription billing (Stripe privacy policy).
- Google: only if you choose Google sign-in. The site's fonts are also loaded from Google Fonts, which sees your IP address.
- Oracle Cloud: hosts our server and database.
- Cloudflare: provides our domain's DNS and delivers the lesson videos.
Some of these providers may process data outside Canada, including in the United States, where it is subject to local laws. We may also disclose information if the law requires it.
6. How long we keep it
- Account and progress data: until you delete your account.
- Sign-in sessions: they expire after 30 days, or when you sign out.
- Payment records: Stripe keeps transaction records as required for tax and financial law, even after you delete your Foothold account.
- Server logs: kept only for a limited time, for security and troubleshooting.
7. Your choices and rights
- Delete your account: on your progress page, under "Delete account". This permanently removes your account, sessions and progress, and cancels any active subscription.
- Billing details and invoices: under progress → Manage billing.
- Access or correction: email us to ask for a copy of the personal information we hold about you, or to correct it.
- If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
8. Security
We protect your information with HTTPS encryption, hashed passwords and session tokens, and server-side checks on everything that affects your account. No system is perfectly secure, but we take it seriously. Please report any security issue to guzee003@gmail.com.
9. Children
Foothold isn't directed at children under 13, and we don't knowingly collect their information. If you think a child under 13 has created an account, contact us and we'll delete it.
10. Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll also let you know on the site.