Privacy policy
Last updated: 13 July 2026. This policy covers explain2me.com and the learning platform at learn.explain2me.com.
Who is responsible
explain2me is the data controller for the personal data described here. For any privacy question or to exercise your rights, email privacy@explain2me.com.
What we collect and why
Account data — when you sign up we store your username and email address so you can log in and keep your progress. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Learning records — course enrolments, lesson and Knowledge Check completion, placement-test answers, lab progress, and practice-exam scores. These exist so the platform can track your mastery and issue certificates. Legal basis: performance of a contract.
AI tutor conversations — messages you send to the tutor, together with the lesson content you are viewing, are processed to generate answers. Conversations are linked to your account so the tutor can keep context. Legal basis: performance of a contract.
Anonymous usage analytics — we run a self-hosted instance of Umami on our own servers. It uses no cookies, stores no IP addresses, and cannot identify you or follow you across other sites. We use it to see which pages and features are used. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding and improving the product.
Cookies and local storage
We set only cookies that are strictly necessary to operate the site, which is why there is no consent pop-up:
| Name | Purpose | Lifetime |
|---|---|---|
| __Host-authjs.csrf-token | Protects the sign-in form against cross-site request forgery | Session |
| __Secure-authjs.callback-url | Returns you to the page you came from after signing in | Session |
| __Secure-authjs.session-token | Keeps you signed in | 30 days |
| csrftoken, sessionid (learn.explain2me.com) | Security and sign-in on the learning platform | Up to 1 year |
We also use your browser's local storage for interface preferences (for example, remembering that you dismissed the privacy notice). Nothing in local storage is used for tracking.
Who else processes your data
Hetzner Online GmbH (Germany)— all our servers, databases, and analytics run in Hetzner's EU data centres.
Groq, Inc. (USA)— AI tutor responses are generated by language models hosted by Groq. Your tutor messages and the relevant lesson content are transmitted to Groq for processing; your name and email address are not included in these requests. This involves a transfer outside the EEA, made under Groq's data-processing terms. If you prefer not to have your questions processed this way, simply don't use the tutor — all course content works without it.
We do not sell or share your data with anyone else.
Certificates are public if you share them
When you earn a certificate, it gets a verification page showing your name, the course, and the date. The page is not listed anywhere on the site, but anyone who has its link can view it — that's what makes it shareable. Email us if you want a certificate page taken down.
How long we keep data
Account and learning data are kept while your account exists. Delete your account (or ask us to) and personal data is removed; anonymous, aggregated statistics may be retained. Server logs rotate automatically within days.
Your rights
Under the GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or restrict processing. Email privacy@explain2me.com and we'll respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.
Age
The platform is intended for users aged 16 and over. We do not knowingly collect data from children.
Changes
If our data practices change, we'll update this page and show the site notice again. Significant changes will be highlighted.