Privacy Policy

Our Data Philosophy

Ace Level is built on a simple principle: collect as little data as possible, and only what is needed to run the site. Creating an account is optional; our site works fine without logging in. If you do sign in, everything you share with us is opt-in.

We will never sell your data to advertisers, brokers, or anyone else. Your information is processed only by a small number of service providers who help us run the platform, listed below.

What We Collect

If you visit without an account

If you browse Ace Level without signing in, we collect minimal technical data through PostHog: pages visited, time spent, device type, browser, and country-level location. We use this to understand how people use the site and improve it. No personally identifiable information is collected from anonymous visitors.

If you create an account

Signing in is optional. If you create an account through Discord or Google OAuth, we receive from the provider:

• Your display name
• Your email address
• Your profile picture

We do not receive your password. Authentication is handled by the OAuth provider, and we never see or store it.

Bookmarks

If you save a bookmark on a course page, we store the page URL and its title alongside your account. You can delete individual bookmarks at any time, or delete your entire account to remove all of them.

Session cookies

When you sign in, we set a session cookie to keep you logged in. This cookie expires after 7 days. That is the only cookie we set. We do not use third-party cookies, tracking cookies, or advertising cookies.

Waitlist

If you join our waitlist, we collect your email address through Brevo. You can unsubscribe at any time using the link in any email we send.

What We Don’t Collect

• Passwords: we never see or store your password. Authentication is handled by Discord or Google.
• Sensitive personal data: we do not collect health data, biometric data, financial information, or any special category data.
• Location beyond country level: analytics data is aggregated at country level. We do not track your precise location.
• Browsing across other sites: we do not track you outside of Ace Level.

Service Providers

We share limited data with the following providers, each processing it only to help us run the platform:

No data is sold to any of these providers. Each is contractually required to process your data only for the purpose described above, in line with their own privacy policies (linked in the table).

Data Storage & Security

• Database: your account data and bookmarks are stored on AWS infrastructure in the EU (Ireland region).
• Application servers: our application runs on servers in the United Kingdom, Singapore, and the United States (Los Angeles), behind Cloudflare for security and performance.
• Encryption: all data in transit is encrypted via TLS. Cloudflare provides TLS termination at the edge.
• Access: access to production systems and databases is restricted to authorised personnel only.

Your Rights

You have the following rights over your personal data:

• Access: you can request a copy of all personal data we hold about you.
• Rectification: you can ask us to correct inaccurate data.
• Erasure: you can request deletion of your personal data.
• Objection: you can object to processing of your data for specific purposes.
• Portability: you can request your data in a structured, machine-readable format.

For EU/UK residents, these rights are provided under GDPR and UK GDPR. For other jurisdictions, we honour the same rights voluntarily.

To exercise any of these rights, contact us at [email protected].

Account Deletion

You can delete your account at any time from your account settings. When you do:

• Your user profile, sessions, connected accounts, and bookmarks are permanently deleted.
• Deletion is completed within one hour.
• Deletion is irreversible: if you create a new account later, it will have no connection to your previous data.

If you have trouble accessing your account, email us at [email protected].

Cookies

We use a single first-party session cookie to keep you signed in. This cookie expires after 7 days. We do not use third-party cookies, advertising cookies, or fingerprinting techniques.

Our analytics provider (PostHog) may set its own first-party cookie for analytics. You can opt out in your browser settings or with a privacy-focused browser extension.

We will introduce a cookie consent banner for EU/UK visitors in a future update. In the meantime, most browsers let you block or delete cookies in their settings.

Children’s Privacy

Ace Level does not knowingly collect personal information from children under 13. If you are under 13, do not create an account or provide any personal information to us. If we find that we have collected data from a child under 13, we will delete it.

Our content is educational and designed for A-Level students (typically 16–18), but it is accessible to anyone regardless of age.

Third-Party Links

Our website may contain links to third-party sites, including Discord, Google, and others. This privacy policy applies only to Ace Level. We are not responsible for third-party privacy practices. Read their policies when you visit them.

Changes to This Policy

We may update this privacy policy from time to time. When we do, the "Last updated" date at the top of this page will change. Review this page periodically. Your continued use of Ace Level after changes means you accept the updated policy.

If we make material changes, we will notify you by email or a notice on the site.

Contact

If you have questions about this privacy policy or your data, contact us at [email protected].