Last updated: October 2026
Practice progress and imported projects are stored locally in your browser, using local storage and IndexedDB. Local rehearsal sends source snapshots and test variables directly to your paired runner on this computer. If you explicitly configure a cloud runner, those snapshots and variables are uploaded to that runner.
GitHub import contacts GitHub and uses your token for authorized repository requests. Runner setup and isolated builds download prerequisites, dependencies and images from configured publishers and registries. The local runner uses session cookies for its own local workspace and pairing credentials to authorize website access. These execution requests are separate from static website asset delivery.
Local progress, workspaces and rehearsal reports use browser storage; the local runner also retains bounded reports on your computer. This means:
The current interface uses a local session without a password. If the browser-local account feature is enabled, it stores salted scrypt password digests rather than plaintext passwords. Browser-local identity is not a security boundary against someone with access to your device. Project files and explicitly saved practice environment values are local data, not an encrypted secret vault; use test credentials.
There is no password recovery mechanism. If you lose your password, your account cannot be recovered.
The application does not include an analytics tracker or serve advertisements. Practice progress and deployment reports are recorded locally for your use. Website hosting and external providers may keep their own request logs.
Contact form submissions send your name, email address, subject and message through Cloudflare Pages Functions and Resend to our support team. If verification is enabled, Cloudflare Turnstile processes browser verification information.
The Service loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). These requests disclose network information such as your IP address to the font provider. GitHub import, prerequisite installation and dependency/image downloads also contact their respective providers. A configured cloud runner is an additional external destination.
Parents and guardians should supervise use by children, including project uploads, external provider requests and runner installation. Avoid importing personal information or real production secrets into practice environments.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service constitutes acceptance of any changes.
You can manage browser-local data using the project library and browser settings. Cloud runner data must also be managed with its operator:
If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected]