Manage your profile, privacy, and security

Open your account menu and select Profile. Profile settings are organised into
sections for personal details, preferences, public visibility, security, and workspace
access.

Public profiles and posting course reviews require adult eligibility. These are
unavailable to under-18s and while adult eligibility is unresolved. Choosing an
anonymous review does not remove this restriction. Private learning and saved work
do not require a public profile. Review public-profile controls before publishing
information, and only enable fields you intend other people to see.
Cookie settings in the footer lets you accept, reject
or independently change optional analytics and session replay. Accept and Reject are equally available; optional
capture requires consent and adult eligibility. Your choice lasts 180 days, after which you
are asked again. Rejecting optional analytics does not prevent you from learning.

Google Analytics measures traffic and navigation. PostHog measures product usage,
page performance and filtered error reports. Where separately approved and available,
session replay records public pages after its own consent. This includes the home
page, public audience pages, Contact, course details and Help articles. If you agreed
while signed out from 11 October 2026, recordings show those pages as they appear,
including their text and images; earlier choices and signed-in recordings stay masked.
Forms and their contents, anything you type and the website assistant are always
excluded on those pages. From 12 October 2026, sign-up and sign-in pages are also
recorded with all their text and fields hidden, showing only layout, scrolling and
clicks. Eligible sessions on supported pages can all be
recorded while traffic is low. If the
separate player visual feature is approved, its controls appear as a masked view;
lesson content, documents, answers, conversations and drawers are excluded. Children
and unknown ages remain excluded. The
pageview events Discentik sends deliberately filter locations and titles, and its
error reports exclude authored content. Turning a purpose off stops new collection
for that purpose; the account-wide opt-out stops both analytics and replay. It does not recall
information already sent. Course progress, completion and saved exercise work still
need to be processed so the course can function and you can resume.

The unused optional-preferences control has been removed. The
language you explicitly select remains available independently of optional consent.
Read the Cookie Policy for the storage inventory and durations.

Choose your interface language

While signed in, open Profile > Account and use Interface language to choose
English or Español. The language selector is hidden from the navigation bar
while you are signed in, including on mobile.

While signed out, open EN or ES at the far right of the navigation bar.
The selector is also available on sign-in pages. On public pages, you can use
Language in the footer whether you are signed in or out. The current language
has a checkmark.
Your choice applies to the Platform and the Course Player, including controls, system
messages, and the Help Centre. While signed in, the preference is saved to your
profile; the browser also remembers an explicit choice after you sign out.

Changing the interface language does not translate authored course content, exercise
answers, messages, or public-profile text. A course's teaching language stays the same.
New system emails and notifications use the recipient's language when they are
queued; an already queued message keeps its original language.

Shared text safety checks

Your display name receives an automated safety check because it can appear on
messages even when your profile is private. For a profile visible to other people,
its public address, headline, biography and links are also checked. If the text is
rejected or the check is unavailable, the previous saved version remains unchanged.
Private biographies and links are not sent to this check. Website and social links
must use valid web addresses.

Course review comments are also checked when saved. Eligible adults can review a course
only after starting it and while you still have access.
Comments are limited to 2000 characters. These checks do not guarantee that every
item is appropriate: use the reporting controls if you find a concern.

Each account can request up to 20 shared-text safety checks per 10-minute window,
across profile and review saves. If you reach the limit, wait before saving again.

Profile photos and account controls

Profile photos are first resized in your browser to reduce the upload. The trusted
platform server then decodes and re-encodes every accepted photo as compressed WebP,
which prevents a modified client from retaining embedded source metadata such as GPS
camera fields. Only those server-generated bytes are sent to OpenAI for automated
content-safety screening and then stored privately. A photo is not uploaded when validation,
server compression, or OpenAI safety screening cannot complete. Animated images are
stored as a static optimized image.

New photos stay private while you preview them. Other people can receive a
short-lived photo link only when your saved profile audience permits it. Making
the profile private stops new shared links; an already issued link expires within
60 seconds. This does not recall copies already downloaded. Older uploaded photos
may still have public links: contact support to review their removal.

The platform checks upload allowances before reading the photo. Each account can
start up to 20 image attempts in 10 minutes and 100 in a rolling 24-hour period;
shared network limits are 60 attempts in 10 minutes and 300 in 24 hours. At most
four uploads, totalling 20 MB, can be in progress for one account. Network addresses
are represented by a one-way keyed identifier for these checks rather than stored in
the upload ledger as plain addresses; that identifier is eligible for removal from
the ledger after 24 hours. A denied image is not screened or stored, and
interrupted or rejected uploads are removed automatically.

Use Profile > Security to change your password, manage two-factor authentication
and passkeys, and review Active sessions. Each entry identifies the browser and
device, when it signed in, and its latest activity. You can sign out one other
session, sign out every other device while keeping the current one, or sign out the
current device. These controls are kept in Security rather than the navigation menu.

For a low-friction learning experience, an active session can continue for up to
180 days and expires after 90 days without activity. The short-lived access token is
renewed in the background while the session remains valid. Revoked devices may keep
an already issued access token only until that short token expires. Never share
recovery links, passwords, or one-time codes.

Workspace access explains which product areas your account can use. Organisation
roles are managed by an organisation Admin; platform-level access is managed
separately and should not be requested through a course instructor.

The Purchase history section in Profile shows retained purchase
confirmations and cancellation records. It is separate from Records and requests,
which is reserved for privacy requests and optional review of an AI-marked learning
result. Course earnings and payout settings remain inside the relevant Instructor or
Organisation workspace.

Select Manage workspaces from the account menu to open Profile > Workspaces
directly. An eligible adult personal learner who has not enabled Instructor also sees an Instructor
button in the top navigation. It opens Profile > Workspaces and focuses the
Instructor setup action. Once Instructor is enabled, the top navigation shows a
Learning and Instructor workspace chooser. Accounts with only one available workspace
and no eligible setup action do not show a redundant workspace button. If you try to
open a workspace that your account cannot use, the platform returns you to
Profile > Workspaces with a focused explanation and the appropriate next action.

Open Privacy requests from Profile to request access, export,
correction, erasure, restriction or objection. Verify the request with your password
or a one-time code sent to your verified account email. If you use an external
sign-in provider, you do not need to create a password. Requests remain processing
while supplier cleanup or a required review is outstanding. Platform and
organisation ownership may require an audited handover before closure; this does
not prevent you from submitting a request.
The Privacy Policy explains the retention periods that apply after account
deletion and to payment, support, security, analytics, and moderation records.

After a reviewed export is ready, verify again to download it from Privacy requests.
The temporary export expires after seven days. It includes an explanatory manifest;
support explains any redactions, exceptions or separate supplier response.

You can always use Contact, including if you cannot sign in or use the
account interface. Support can help with all privacy rights. Requests normally
receive a response within one month, with any permitted extension explained within
that month. Account ownership or organisation responsibilities may require a handover
before closure; these do not remove your right to submit a privacy request.