SwiftQuestPrivacy Policy
Last updated 7 October 2026
The short version: we ask for an email address, we keep your learning so you can come back to it, and we do not sell, share or advertise with anything. Open any section for the details.
Who is responsible
The controller of your data is VarForge, reachable at info@swiftquest.dev.
This website
This website sets no cookies and runs no analytics, trackers or advertising. Like every website, it is delivered through Cloudflare, which processes your IP address and request details to deliver the page and protect it from attacks. Its small script only animates the page; it sends nothing anywhere.
What we collect when you use SwiftQuest
| Data | Why | Legal basis |
|---|---|---|
| Email address and password (stored only as a one-way hash), or the fact that you signed in with GitHub or Google | To create your account and let you sign in | Contract |
| Display name, avatar and time zone (generated or chosen by you) | To show your profile and count your learning days correctly | Contract |
| Your learning: the code you write, your runs and checks, hints, progress, skills, projects and learning days | To provide the course and keep your work | Contract |
| Sessions: the devices you are signed in on, with their IP address and browser | To keep you signed in and let you sign out everywhere | Contract; legitimate interest in security |
| A security log of sign-in failures, refused requests and similar events | To protect accounts and the service | Legitimate interest in security |
| Your plan, and Paddle's customer and subscription references | To give Pro to the right account | Contract |
| Your choice to receive news by email, with when and how you chose it | To send occasional news, only if you ask | Consent, which you can withdraw at any time |
We never ask for your name, phone number, address, date of birth or photo, and card details go to Paddle, never to us.
Who else handles it
- Hetzner Online (Germany): our servers. Your account and learning are stored in the EU. Privacy policy.
- Cloudflare: delivery and protection of the website and the service, and its bot check on sign-up. Cloudflare is a US company; transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses. Privacy policy.
- Amazon Web Services (Frankfurt): sending our emails, such as your sign-in code. AWS is a US company, with the same safeguards. Privacy policy.
- Paddle: if you buy Pro, Paddle sells it to you as Merchant of Record and handles your payment and invoice as an independent controller. Paddle's privacy policy.
- GitHub or Google: only if you choose to sign in with them.
- Have I Been Pwned: when you set a password we check it has not appeared in a known breach. Only the first five characters of a one-way hash of it leave our server, never the password.
We do not sell your data, and we do not share it with anyone else unless the law requires us to.
How long we keep it
| Data | Kept |
|---|---|
| A sign-up never confirmed with its code | 24 hours |
| Your account, profile and learning | Until you delete your account |
| Sessions | 30 days, renewed while you use them |
| Sign-in codes and password-reset links | 5 and 60 minutes, and deleted once used |
| The security log | 90 days |
| Payment event records from Paddle | Details 90 days; the event and its outcome 2 years |
| Server logs | 14 days |
| Backups | 30 days |
When you delete your account we cancel any subscription, then delete your account and all your learning data. Backups expire within 30 days, and a deletion is applied again if one is ever restored. Paddle keeps its own invoice records as the law requires of it.
Cookies
When you are signed in, SwiftQuest uses one cookie to keep you signed in. It is strictly necessary, so it needs no consent. Cloudflare may set its own security cookies to tell people from bots. There are no analytics or advertising cookies.
Your rights
You can access, correct, export and delete your data, most of it directly from your profile. You can also object to processing based on legitimate interest, withdraw consent for news emails at any time (every email has a one-click unsubscribe), and ask us anything about your data at info@swiftquest.dev. We answer within one month.
You can also complain to a data protection authority. Ours is the State Data Protection Inspectorate of Lithuania, vdai.lrv.lt; you may also go to the one where you live.
Age
SwiftQuest is for people 16 and older. We do not knowingly collect data from younger children.
Security
Passwords are stored only as strong one-way hashes, connections are encrypted, the code you run is kept apart from our systems and from other learners, and only we can reach the servers.
Changes
If we change this policy in a way that matters to you, we will tell you by email before it applies. The date at the top says when it last changed.