Legal & Privacy

>Privacy Policy

Last updated: September 3, 2026. Clear, transparent, and learner-first.

No Data Selling

We never sell, rent, or monetize your personal information or learning data to advertisers or third parties.

Client-Side Execution

Your Python code executes 100% locally in your browser via WebAssembly (Pyodide). Your code is not sent to external servers.

Optional Email

You can create an account with just a username and password. An email address is never required to learn.

1. Information We Collect

We collect only the minimum necessary information to provide you with an interactive learning platform:

Account Identification: A unique username and securely hashed password (using industry-standard cryptographic algorithms). If you choose to link Google OAuth or provide an email, we store it solely for account access and recovery.
Profile Details: Your chosen display name, optional school/institution, and optional daily learning goal.
Learning Progress: Lessons completed, quiz answers, test scores, exercise submissions, earned XP, daily streak counters, and certificates issued.
User Files & Notes: Code files saved from the Playground, personal markdown notes, and files you upload to PyLabs Cloud Drive.
Recovery Data: If opted in, hashed answers to security questions or a verified phone number used exclusively for one-time SMS verification.

2. How We Execute Your Python Code

PyLabs uses Pyodide (WebAssembly) to run Python directly inside your web browser sandbox:

100% In-Browser PrivacyWhen you write and run code in lessons or the Playground, the Python interpreter runs in your local browser memory. Your code is not transmitted to external computing servers or AI training pipelines.

3. Infrastructure & Data Storage Security

PyLabs is built on modern, secure cloud infrastructure:

Cloudflare D1: Encrypted SQLite database engine storing relational progress and user records.
Cloudflare R2: S3-compatible private object storage for user-uploaded code and assets, protected with strict access control.
Encryption in Transit: All web traffic is strictly encrypted using TLS 1.3 / HTTPS.

4. Cookies & Session Management

We use only essential, first-party authentication cookies to maintain your signed-in session securely:

We do not use third-party tracking pixels, cross-site trackers, or marketing cookies. You can sign out at any time to invalidate your session token across all devices.

5. Your Data Rights & Deletion

You have full ownership of your data. You may:

Export or download your code files from PyLabs Drive at any time.
Change your display name, username, or linked recovery channels in Account Settings.
Request complete account deletion and data purging by contacting platform administrators or submitting a request via our on-site feedback button.

6. Contact Us

If you have questions about this Privacy Policy or your data, please contact:

Mahadi Hasan · Platform Administrator & Creator
Official Support: WhatsApp Support or via the on-site feedback widget.