Skip to main content
HTML5ANDCSS3 logoHTML5ANDCSS3Tools and Tutorials

Privacy Policy

Who We Are

HTML5ANDCSS3.org publishes web development tutorials, interactive code tools and a paid practice workspace. This policy explains what we collect, why, and who we share it with. Our website address is https://html5andcss3.org.

For any privacy question, or to exercise the rights described below, contact business@html5andcss3.org.

Information You Give Us

  • Account details - your name and email address. Passwords are stored only as a salted hash, never in readable form.
  • Social sign-in - if you sign in with Google, GitHub or LinkedIn we receive your name, email address and profile picture from that provider, and store a reference to that account. We only accept an account whose email address the provider has verified.
  • Two-factor authentication - if you enable it, we store the secret and your recovery codes so we can verify your codes.
  • Profile picture - optional, if you upload one.
  • Email verification codes - one-time codes sent when you register or verify an email address.
  • Messages you send us - anything you submit through our contact form.
  • Newsletter - your email address, if you subscribe. You can unsubscribe at any time.

Information Created As You Learn

When you are signed in we record your activity so your progress is there when you return:

  • Lessons and tutorials you have opened or completed.
  • Practice problems you attempt, the code you submit, and whether it passed.
  • Assessment attempts and scores.
  • Badges awarded and certificates issued.
  • Bookmarks and saved drafts.

Code You Write

  • In the Try It editor - code you type is kept in your own browser's local storage. It is not sent to us unless you choose to share it.
  • Shared previews - if you create a share link, that code is stored on our servers so the link can be opened by anyone who has it. Do not put personal or confidential information in code you share.
  • Practice submissions - code you submit for grading is stored with your account.

Previews run inside a sandboxed frame that loads libraries from the jsDelivr CDN. That means jsDelivr receives your IP address and browser details when a preview runs, in the same way any website you visit does.

Questions You Ask Us

If your plan includes lesson questions, we store the question, your follow-ups, our answers, your name and email address, and which lesson it was about. We use this only to answer you and to keep a record of the exchange.

We may publish an answer on the lesson it relates to so other learners benefit. When we do, it is anonymised: your name, email address and any identifying detail are removed first. Do not include passwords, API keys or personal information in a question.

Payment Information

Paid practice plans are processed by Razorpay. Payments are handled on Razorpay's systems and we never receive or store your card, UPI or bank details.

We do store a record of the transaction: the order and payment reference, amount, currency, plan purchased, any coupon used, the resulting access period, and any refund, cancellation or dispute linked to it. We keep these records because we are required to account for payments.

Information Collected Automatically

  • IP address and browser user agent - used for rate limiting, to detect abuse, and recorded in administrative audit logs of security-relevant actions.
  • Usage analytics - pages visited, time on page, browser and device type, and the referring website.

Cookies and Similar Technologies

We ask for your consent before setting anything beyond what is strictly necessary. You can change your choice at any time from the cookie notice.

  • Necessary - sign-in sessions, security and consent storage. These cannot be switched off.
  • Functional - remembering preferences such as your theme, and code kept in your browser for the Try It editor.
  • Analytics and performance - Google Analytics, to understand how the site is used.
  • Advertising - Google AdSense, which may use cookies to select and measure ads.

Third Parties We Share Data With

We do not sell or trade your personal information. We share only what each service needs to do its job:

  • Razorpay - payment processing, refunds and subscriptions.
  • Google Analytics (measurement ID G-QF30HSM1KS) - usage analytics.
  • Google AdSense - advertising shown on parts of the site.
  • Google Sign-In - only if you choose to sign in with Google.
  • GitHub - only if you choose to sign in with GitHub.
  • LinkedIn - only if you choose to sign in with LinkedIn.
  • Resend - sending verification, account and newsletter email.
  • ImageKit - hosting and delivering images and media used on the site.
  • jsDelivr - delivering the libraries used to run code previews in your browser.

These providers operate their own privacy policies, and some process data outside your country. Where that happens we rely on the provider's own safeguards for international transfers.

Certificates and Public Verification

If you earn a certificate, we store your name, email address, the tutorial completed and your assessment score. Certificates can be checked on our verification page: a certificate is confirmed only when the correct learner name and certificate number are supplied together. We do not publish a searchable list of certificate holders.

How Long We Keep Information

  • Account and learning records - while your account exists, and deleted with it.
  • Payment, refund and dispute records - retained after account deletion where we must keep them for accounting, tax or fraud-prevention purposes.
  • Certificates - retained so an issued certificate stays verifiable.
  • Shared previews - kept until you or we delete them.
  • Lesson questions and answers - kept while your account exists, so you can re-read them.
  • Security and rate-limit logs - kept for a short period, then discarded.
  • Contact messages and newsletter subscriptions - kept until you ask us to remove them, or you unsubscribe.

Your Rights

You can ask us to:

  • Give you a copy of the personal data we hold about you.
  • Correct anything inaccurate.
  • Delete your account and the personal data attached to it.
  • Stop sending you marketing email.
  • Withdraw cookie consent for analytics and advertising.

Email business@html5andcss3.org and we will respond. Some data must be kept where the law requires it, such as records of payments already made.

Security

Passwords are salted and hashed, two-factor authentication is available, sign-in attempts and sensitive actions are rate limited, and administrative actions are logged. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal information, contact us and we will remove it.

Changes to This Policy

We may update this policy as the site changes. The revised version is posted on this page, and material changes will be highlighted here.

Contact Us

If you have any questions about this page, email us at business@html5andcss3.org.