Privacy Policy

The short version

ZeroCorps is a trading education site. We collect as little about you as we can, we never sell it, and we do not run advertising or tracking scripts. This page says exactly what we hold, why, and how to have it deleted.

What we collect

When you create an account:

• Your email address. It is how you sign in, and where we send security emails: your sign-up code, password resets, and alerts about new sign-ins.
• Your password, as a one-way hash. We never store the password itself and cannot read it.
• The date you agreed to the Terms, and which version.

As more of the site opens, and only if you use those parts:

• A username, an optional display name and an optional profile picture. We keep only a small square copy of the picture, without its location or camera details. It is shown to you, and to us for the community analytics below; it is never shown to other members. Removing it, or deleting your account, deletes it; the analytics copy goes the next time we refresh it.
• If you turn on two-factor sign-in: the secret your authenticator app shares with us and your backup codes, both stored encrypted. We never ask for your phone number.
• Your Discord ID and Discord username, only if you choose to link your Discord account. We ask Discord for nothing else and store no Discord access tokens.
• Which lessons you have completed and when, and the rank that follows from them.

Security records

To protect accounts we keep a record of security events: sign-ins, failed sign-ins, password resets, and sign-ins from a browser we have not seen before. These records do not contain your full IP address. We store a scrambled (keyed-hash) form of it that cannot be read back, a coarse network prefix, and the family of your browser, such as “Chrome on Windows”. They are deleted after 90 days.

Cookies

We use only the cookies the site needs to work:

• a sign-in cookie, so you stay signed in (up to 30 days);
• a short-lived cookie while you are confirming your email address (15 minutes);
• a cookie that lets us recognise a browser you have signed in from, so we can warn you about a new one;
• with two-factor on: a short-lived cookie while you type your code (10 minutes), and, only if you tick “trust this browser”, a cookie that skips the code there for 30 days.

There are no advertising cookies, no analytics cookies and no third-party trackers.

How we use it

• To run your account and keep it secure.
• To show you your own progress and rank, and to give you the matching role in our Discord if you linked it.
• For our own community analytics. We look at usernames, display names, email addresses, profile pictures, ranks and lesson progress, and the Discord username of members who linked Discord, to understand how members are getting on. This stays on our own computer and is never published or sold.
• To get in touch on Discord. We may contact members on Discord about opportunities connected to ZeroCorps, based on their progress. You can ask us not to.

Who handles it for us

We use a small number of companies to run the site: a hosting provider, a database provider and an email delivery provider. They process data only to provide their service to us. We do not sell or rent your data to anyone.

How long we keep it

• Your account data: until you ask us to delete your account.
• Security records: 90 days.
• A sign-up you never finished: 15 minutes, and nothing is created from it.
• Encrypted backups: until they are replaced by newer ones.

Deleting your data

You can delete your account and everything connected to it yourself, at any time, in your account settings under “Delete account”. It takes effect at once. You can also ask us to do it for you, or to send you a copy of what we hold.

Contact us at contact@zerocorps.org.

Age

ZeroCorps is for adults. You must be 18 or older to create an account.

Changes

If this policy changes in a way that matters, we will say so on the site before the change takes effect.