Privacy Policy

This policy explains what personal data Open Fraud Labs (“we”) collects through openfraudlabs.com, why, and the choices you have. We aim to follow the Nigeria Data Protection Act 2023.

Who we are

Open Fraud Labs, Lagos, Nigeria. Contact: hello@openfraudlabs.com.

What we collect

• Account details: your full name, email address and password (stored securely by our authentication provider; we never see your password).
• Learning records: courses you enrol in, when you log in, lessons you open, video and study-note progress, quiz attempts with your answers and scores, practice exercises you solve, lessons completed, capstone submissions (including the links and write-ups you provide) and reviewer feedback. Code you type in the practice lab runs in your browser and is not sent to us.
• Certificates: your name, course, issue date and certificate ID.
• Website analytics: this site uses Google Tag Manager, which may collect standard usage data such as pages visited and device information.

Why we use it

• To provide your account, save your progress and mark quizzes.
• To review capstone projects and issue certificates.
• To understand how the courses are used so we can improve them, mostly using aggregated, non-identifying figures.
• To contact you about your account or learning (for example password resets).

We use your data on the basis of your consent when you create an account, and to deliver the service you sign up for. We do not sell your personal data.

What is public

If you earn a certificate, anyone with its certificate ID can view your name, the course and the issue date on our verification page, so employers can confirm it is genuine. Nothing else about your account is public.

Who processes data for us

• Supabase hosts our database and logins (servers in London, United Kingdom).
• GitHub Pages hosts the website.
• Google provides website analytics via Google Tag Manager.

How long we keep it

We keep your account and learning records while your account is active. Certificates are kept so they can continue to be verified. You can ask us to delete your account at any time; if you do, your certificates will no longer be verifiable.

Your rights

You can ask to access, correct or delete your personal data, object to or restrict its use, receive a copy of it, or withdraw your consent. Email hello@openfraudlabs.com and we will respond as soon as we can. You may also complain to the Nigeria Data Protection Commission.

Security

Data is sent over encrypted connections, and database access rules ensure each learner can only see their own records.

Changes

We may update this policy and will change the date above when we do.