Privacy

Code Literacy is run by 1001613716 Ontario Inc., operating as webfaCeMEdia · 57 Finch Ave West, Toronto, ON M2N 0K9. We are responsible for the personal information described here. For anything about your data, write to support@webfacemedia.com.

• A device token. Your browser makes a random token the first time you open a lesson and keeps it in local storage. We store only a scrambled (hashed) form of it. It lets us save your progress without knowing who you are.
• Progress and learning events. The steps you work through: which activities you open, finish or skip, mistakes the tutor spotted, help requests, and the skills you have mastered. Code and explanations you write may be stored briefly so a teacher can see your screen when you are in their class.
• Your email, if you make a learner account. Used only to send your sign-in codes and to link your progress across devices. Sign-in codes are stored scrambled.
• A first name, if you join a class. Your teacher sees it next to your progress. You can also choose to put a first name on a share card or a certificate; certificate names are shown on the public certificate page so others can verify it.
• Teacher accounts. Name, email, a scrambled password, the classrooms you create and your plan.
• Billing.Payments go through Stripe. We keep the plan, its dates and Stripe’s reference numbers, never your full card number.
• Pilot and contact requests. What you send us on the pilot form: your name, role, institution, email and anything else you choose to add.
• Technical data. Sign-in cookies, and a scrambled form of your IP address to enforce usage limits. Our own analytics service counts page views and course events on codeliteracy.ca.

We do not ask learners for a last name, birth date, address or phone number.

• To run the course: save progress, show it on every device you sign in on, and issue certificates.
• To run classrooms: show teachers their learners’ live progress, mistakes and reports.
• To tutor: give feedback, grade explanations and voice the tutor.
• To bill teachers and institutions, and to answer requests.
• To keep the service safe and within limits, and to improve the lessons.

We use a small number of service providers. Each receives only what it needs for its job, and processes it on our behalf:

• Hosting and database, to serve the site and store accounts and progress.
• Email delivery, to send sign-in codes and account emails.
• Payments (Stripe), for teacher and institution billing.
• AI model providers, for tutoring, grading and tutor voices. They receive the activity and what you wrote or said in it, not your email.

When you talk instead of typing, speech-to-text is done by your browser’s own speech service. Some of these providers may process data outside Canada, including in the United States.

We do not sell personal information, rent it, or share it for advertising. We do not show ads in the course. Learners’ work is not used to train AI models by us.

• Accounts, progress and certificates: while the account or classroom is in use, and until you ask us to delete them.
• Sign-in codes: they expire after 10 minutes and are removed within a day.
• A learner’s live screen shared with a teacher: replaced as they work, and only kept for learners in a class.
• Usage counters for AI limits: kept by day, without names or emails.
• Billing records: as long as tax and accounting law requires.

You can ask to see, correct or delete your personal information, or close your account, by writing to support@webfacemedia.com from the email on the account (or, for a class learner, through the teacher). We will confirm it is you and reply within 30 days.

Signing out on a device starts a fresh, anonymous identity on that browser. Teachers can remove learners from their classrooms at any time.

The course is used by learners of many ages. When learners under 18 use it in a class, the teacher and their school or institution are responsible for getting any consent their rules or the law require. Class learners join with a first name only. If you believe a child has given us personal information without the consent they needed, write to support@webfacemedia.com and we will delete it.

Data travels over encrypted connections. Tokens, codes and passwords are stored only in scrambled form, and sign-in cookies are signed so they cannot be forged. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

If we change this policy in a way that matters, we will update this page and its date, and tell account holders by email when the change affects them.