Privacy & Cookies
Last updated: October 10, 2026 · Notice version: 1
Brandon Goulter, operating Goulter Group in California, United States, operates this Learning Center. Contact privacy@goultergroup.com with privacy questions or requests. Learning Center is currently a personal, noncommercial project intended for children and adults. Optional analytics are disabled.
Learning work in this browser
Python exercise drafts and spreadsheet cell-edit drafts are stored in localStorage for the selected learner profile and exercise. They are not the same as server progress records. Recovery of older Python drafts is explicit and limited to the eligible personal profile; this panel does not recover, delete or move drafts. These drafts have no automatic expiry.
localStorage also holds display choices for theme, progress-path filtering and course-group expansion. Your account theme preference can also be saved through Learning's account controls. A sessionStorage value remembers the requested profile in this tab; that requested identifier accompanies profile requests, and the server verifies the actual profile and authorization. A local profile value does not grant access.
Requested progress, exercise outcomes, checkpoints, activities and bookmark updates can be queued in IndexedDB in this browser until the matching owner can send them. The queue contains outcome, status and identifier data; it does not contain learner source code, answer text, email or credentials. Successful delivery removes queued records through the existing acknowledgement process.
App resources and explicitly saved lessons or the locally hosted Python runtime use CacheStorage browser caches. The existing offline controls manage those copies. These browser stores have no automatic time-based expiry. Browser eviction, explicit app controls or site-data clearing can affect them. Clearing browser data can lose drafts or unsent progress; this privacy panel does not clear it.
Account, profile and server records
Signing in and selecting a profile use Goulter Group Account and Learning services. They handle authorized profile records, access permissions, progress, assessments, bookmarks and preferences. Python execution runs locally in your browser; progress requests send results and identifiers rather than learner source text. Account permissions and managed-profile restrictions remain in the existing services.
Essential sign-in cookies are limited to this host and protected from access by page scripts. The session cookie lasts up to eight hours, subject to an earlier account-session expiry. Temporary sign-in and child-flow cookies last up to five minutes. Logout and completed flows remove their corresponding cookies.
Account export and deletion controls concern server-side records. A server export does not include browser-local drafts, queues or offline caches, and an account request does not automatically remove device-only copies. Use the existing app, browser and device controls to manage those copies. See the Account privacy and family information for that separate service.
Information, purpose and recipients
| Information | Purpose | Where it goes |
|---|---|---|
| Exercise drafts, browser display choices and offline lessons | Continue work and use saved lessons on this device | This browser's localStorage and CacheStorage |
| Requested profile identifier; account theme preference | Request permitted profile context and save account display preferences | Browser sessionStorage for the profile hint, then authorized Learning requests on Cloudflare. Learning's account controls can save the theme preference in Learning's service. |
| Queued outcomes, status and identifiers | Deliver requested progress changes when the matching owner can send them | Browser IndexedDB, then authorized Learning services on Cloudflare; acknowledged records leave the queue |
| Account, authorized profile, permissions and learning progress | Sign in, select permitted profiles and retain requested activity | Goulter Group Account and Learning services on Cloudflare |
| Network, request and application-log information | Deliver, protect and troubleshoot the service | Cloudflare hosting, security and operational services |
| Information you include in a privacy enquiry | Handle your question or request | Brandon Goulter; Cloudflare email forwarding and Gmail |
Cloudflare and Google operate internationally. Information processed for hosting, security and privacy-request email may be processed outside the United States. See Cloudflare’s privacy policy and Google’s privacy policy for their processing.
Children and families
The intended audience includes children under 13 and adults. Child data collection through Account has not been enabled. The site's public pages still involve the hosting and security processing described below. Parents or guardians can contact us about a child's information; do not send a child's private details with an initial enquiry.
Hosting, security and retention
Cloudflare hosts and delivers pages, assets and requests and helps protect the site. It processes network and request information, which can include IP addresses, requested URLs and browser request headers. Application logging supports operation and troubleshooting. Disabling optional analytics does not stop hosting, security processing or requested account and learning actions.
Cloudflare handles network, security and operational records under its service settings and retention practices; different records have different retention periods. Used account records and saved learning activity remain in the active services until their existing deletion controls or a handled deletion request remove them; there is no fixed automatic deletion schedule for saved activity. Abandoned unused unverified signups have a separate Account cleanup policy. Temporary authentication flows have the separate expiries described above. Server records are separate from browser drafts and caches. Deleting active server information may leave recoverable copies in provider backup history for a limited period. See Cloudflare's privacy policy for its processing.
We do not currently use site information for promotional emails, sell it or share it for targeted advertising.
Privacy preferences
Optional analytics are disabled. No acceptance is needed, and this panel records no preference or visitor identifier. It changes no essential account or learning behavior and does not apply a setting to another site.
Optional analytics remain disabled whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Other sites have their own records and settings. The notice is built locally into this app, including its offline shell; reading it does not depend on loading another site's notice script.
Questions and requests
Email privacy@goultergroup.com to ask about this notice or request access to, correction of or deletion of information. Tell us which site and information your request concerns. Brandon Goulter handles these enquiries. We may need to verify your identity or authority to act for a child before disclosing or changing account information. Do not send passwords, medical information or private learning contents with your initial enquiry.
Privacy-request emails are forwarded to Gmail and retained until manually deleted. There is no fixed retention period. Deleting an email normally moves it to Gmail's Trash, where it can remain recoverable for up to 30 days unless permanently deleted sooner.
See the Goulter Group operator notice for the operator's directory notice and contact information. Other applications have their own records and settings. Changes to this notice will be posted on this page.