Last updated 26 October 2026
Privacy
This notice covers both parts of The Terraformed Life: this public site at terraformed.dev, and the course at app.terraformed.dev. It says what we store, why, for how long, and how to have it changed or removed. We do not sell personal data, show advertising, or use tracking or analytics cookies.
Questions, requests and complaints about privacy: privacy@terraformed.dev.
On this site (terraformed.dev)
- Tutorial requests: your name, email address, the request and when you sent it. We use the email address only to reply about that request.
- Forum posts: your display name and your posts are public. Your email address is stored for moderation and is never shown or shared.
- Abuse protection: with each request or post we keep a one-way hash of your IP address, not the address itself, plus short-lived rate-limit counters.
- Cookies: this site sets none.
In the course (app.terraformed.dev)
- Your account: email address, display name and role. Your password is stored only as a salted PBKDF2 hash. Your two-factor secret is stored encrypted, and your recovery codes only as hashes.
- Sessions: one strictly necessary cookie keeps you signed in. Each session records the IP address and browser it was created from, so you can review and end your sessions from your account page. Sessions expire after 14 days.
- Your learning record: lessons completed, quiz attempts, lab results, hints revealed, capstone submissions and reviews, and your certificate.
- Your lab work: the files in your sandbox are backed up to storage so they survive between sessions, and Terraform state from the remote-state labs is kept there too.
- Certificates: if you earn one, its public verification page shows your name, the course and the date, so that anyone you give the link to can check it.
- Security log: sign-ins, failed sign-ins, two-factor events and administrator actions, with IP addresses. It is kept for 180 days.
- Your device: your light or dark theme choice is kept in your browser's local storage. It never leaves your device.
Why we use it
To provide the course you signed up for and the services you ask for (account, progress, labs, certificates, replies to requests); and, as a legitimate interest, to keep the service secure and free of spam and abuse (the security log, IP hashes and rate limits).
Who else handles it
Both sites run on Cloudflare, which hosts the data and processes every request (including your IP address) to deliver and protect the service. If email is enabled, invitations and password resets are sent through Resend. We share personal data with no one else, except where the law requires it.
How long we keep it
- Your account and learning record, for as long as you have an account.
- Sessions, 14 days. Password-reset links, a day after they expire. The security log, 180 days.
- Tutorial requests, until they are dealt with or you ask us to remove them.
- Forum posts, until you or a moderator remove them.
Your rights
You can ask for a copy of your data, to have it corrected, to have it deleted (your account, your requests or your posts), to restrict or object to how we use it, or to receive it in a portable format. Email privacy@terraformed.dev from the address you used with us, and we will reply within one month. If you are unhappy with our answer, you can complain to your data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk).
Children
The Terraformed Life is meant for adults and older teenagers learning professional skills. It is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change what we collect or how we use it, we will update this page and the date at the top.