Legal

Privacy Policy

Last updated: October 15, 2026

This policy, from Descent (“we”), explains what we collect and why. Short version: the minimum needed to run accounts, sync progress and handle subscriptions. We don’t sell your data or use advertising trackers.

What we collect

• Account: your name, sign-in email, and a hashed password, or, if you sign in with Google, GitHub, Apple or Microsoft, the basic profile they share (name, email, picture).
• Learning progress: which lessons you’ve completed and the last lesson you opened, so it syncs across devices.
• Student verification: the school (.edu) email you verify and when. We also keep a one-way hash of that address, and of your sign-in email once you’ve had a free trial, so each free trial can only be claimed once. These hashes are kept after account deletion for that purpose only.
• Subscription: your Stripe customer and subscription IDs, plan, status and renewal dates. Card details are entered on Stripe’s checkout page and go only to Stripe; we never see or store your card number.
• Technical: standard request logs kept briefly by our host for security and reliability (IP address, browser, pages requested).

Cookies and local storage

We use only cookies that the site needs to work: a sign-in session cookie, a short-lived cookie that remembers whether your account has Descent Pro (so lessons load quickly), and Stripe’s own cookies on its checkout page. Your browser’s local storage keeps your theme choice and a copy of your progress. No analytics or advertising cookies.

Who processes it for us

• Cloudflare: hosting and delivery of the site.
• Neon: the database that stores accounts, progress and subscription status.
• Stripe: payments, invoices and the billing portal (Stripe’s privacy policy).
• Resend: sending password-reset and student-verification emails.
• Google, GitHub, Apple, Microsoft: only if you choose to sign in with them.

These providers may process data outside your country, under their own safeguards.

Why we use it

To provide the service you sign up for (accounts, progress sync, subscriptions), to prevent fraud and trial abuse, and to meet legal and tax obligations. If you are in the EU or UK, our legal bases are: performance of our contract with you (accounts, progress sync, subscriptions), our legitimate interests (preventing fraud and trial abuse, keeping the service secure) and legal obligation (tax and accounting records).

Keeping and deleting your data

You can delete your account at any time from Account → Delete account. This cancels any subscription immediately and deletes your profile, progress and verified school email from our database. Stripe keeps payment records it is legally required to retain. You can also ask us to access, correct or delete your data by emailing support-descent@cmd-tab.com.

Children

Descent isn’t directed at children under 13, and we don’t knowingly collect their data.

Changes and contact

If we change this policy materially we’ll update the date above and, for account holders, send an email. Questions:support-descent@cmd-tab.com.