Legal
Privacy policy
Last updated 26 September 2026
The short version: we don't ask for your name, email or phone number, we never store your password, and we don't use analytics, advertising or tracking cookies. We keep only what we need to save your course progress, and you can download or delete it at any time.
Who we are
FreeCourses.App is operated by KAZMAROS PTY LTD (ABN 71 695 478 721), an Australian company ("we", "us"). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Because learners join from around the world, we also give everyone the rights described below, which are modelled on the EU and UK General Data Protection Regulation (GDPR). You can reach us about privacy at hello@freecourses.app.
What we collect and why
| Information | What we do with it |
|---|---|
| Your password | Used once, when you log in, to work out which profile is yours, then discarded. We never store it. We keep only a one-way keyed hash (an HMAC-SHA256 fingerprint) that can't be turned back into the password. |
| Your learning progress | The lessons you complete and when, your quiz scores and attempts, whether you got each knowledge check right first time, the days you were active (for your streak), and the last lesson you opened. This is what makes the site work: your dashboard, badges, XP and certificates. |
| A name for certificates (optional) | If you add one, we show it on your dashboard and certificates. You can change or remove it at any time on My learning. Use any name you like. |
| Your IP address | Held briefly in memory to limit repeated login attempts, which protects every learner from password guessing. We don't save it with your profile. |
| Technical request logs | Our hosting provider records technical details of requests (such as the time, the page requested, errors, and network details that can include your IP address and approximate location) for a limited period, so we can fix problems and keep the service secure. |
| Emails you send us | If you email us, we keep your message and email address to reply and to keep a record of the request. |
We don't collect sensitive information, we don't build advertising profiles, and we don't sell, rent or trade personal information. We don't use your information for automated decisions that affect you.
Under the GDPR, our legal bases are: providing the service you asked for (your progress and certificate name), and our legitimate interest in running a secure, working website (login rate limiting and request logs).
Cookies and storage on your device
We use one strictly necessary cookie to keep you logged in for up to 180 days, and your browser remembers whether you prefer light or dark mode. Neither is used for tracking. The cookies and storage page lists them in full. Because we only use what's strictly necessary, we don't show a cookie banner.
Who we share it with
We use Cloudflare, Inc. to host the website and store progress in its D1 database. Cloudflare processes data for us under its data processing terms and doesn't use it for its own purposes. We also use an email provider to receive and answer emails. We don't share personal information with anyone else unless the law requires it (for example, a valid court order).
Where it's stored
Progress is stored in a Cloudflare database located in the Oceania region. Cloudflare runs a global network, so a request may be handled by a data centre near you, anywhere in the world, and Cloudflare is based in the United States. We take reasonable steps under Australian Privacy Principle 8 to make sure overseas providers protect your information, and for transfers from the EU or UK we rely on Cloudflare's standard contractual clauses.
How long we keep it
- Your progress profile: until you delete it, or until we close the service. If we ever start removing long-inactive profiles, we'll say so on this page first.
- Login rate-limit records: about a minute.
- Hosting request logs: a few days, set by Cloudflare's log retention.
- Emails: as long as needed to deal with your request and keep reasonable records.
Your rights
Wherever you live, you can:
- See and copy your data. Log in and use Download my data on My learning to get everything we hold about your profile as a file.
- Correct it. Change your certificate name on My learning at any time.
- Delete it. Use Delete my profile on My learning. It's permanent and immediate.
- Object or ask us to limit how we use your information, by emailing us.
- Complain to us, and then to a regulator (see below).
Because we don't know who you are, we can't match an email to a profile, and we'll never ask for your password. That's why these tools are built into the site: logging in with your password is how you prove a profile is yours. We don't charge for any of this.
Security
All traffic is encrypted with HTTPS. Passwords are never stored, profile ids are keyed hashes, the login cookie is signed and can't be read by page scripts, and login attempts are rate limited. No system is perfectly secure, so please use a password you don't use anywhere else. Anyone who knows your password can see and change the progress saved against it, and we can't recover a forgotten password.
If a data breach is likely to cause serious harm, we'll follow the Notifiable Data Breaches scheme, including telling the Office of the Australian Information Commissioner. As we hold no contact details for learners, we'd tell you with a notice on this website.
Children
FreeCourses.App is made for adults and older teenagers. If you're under 16, please use it with a parent or guardian's permission. We don't knowingly collect information that identifies a child. A parent or guardian can contact us about any concern.
Complaints
Email hello@freecourses.app with what happened and what you'd like us to do. We'll acknowledge it promptly and aim to respond in full within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you live in the EU, EEA or UK, you can also complain to your local data protection authority.
Changes to this policy
We'll update this page if the way we handle information changes, and change the date at the top. If a change is significant, we'll also put a notice on the site.