Privacy Policy

Last updated: July 2026

Overview

This policy explains what information Core & Cladding collects from visitors and enrolled students, how that information is used, and how to request access to it or its deletion. Core & Cladding is operated by David Osisek from Portland, Maine.

Information Collected

Core & Cladding collects only what is needed to run an account and deliver course content:

• Account information: name, email address, and a securely stored password (or a login token if a third-party sign-in method is used).
• Payment information: billing name and card details, handled entirely by Stripe. Card numbers are never stored on Core & Cladding's own servers or database.
• Course activity: which modules and lessons have been completed, quiz or cert-prep progress, and login timestamps, used to track study progress and course access rights.
• Support requests: anything submitted through the contact address on the Security & Contact page.

How Information Is Used

Account and progress data is used to operate the login, track course completion, and provide access to purchased modules. Payment data is used only to process transactions and issue receipts or refunds. Email addresses may be used to send course-related notices, such as receipts, password resets, or updates to purchased material. Marketing email, if ever sent, will include a working unsubscribe link and will only go to addresses that opted in.

Payment Processing

All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Stripe collects and stores card details directly; Core & Cladding receives only a payment confirmation, the last four digits of the card, and transaction metadata needed for support and refunds.

Cookies and Analytics

The site uses only the cookies or local storage needed to keep a login session active and to remember a light or dark theme preference. No third-party advertising trackers are used. If aggregate, privacy-respecting analytics are added later, this section will be updated first.

Data Sharing

Personal information is not sold, rented, or shared with third parties for their own marketing purposes. Information is shared only with the service providers needed to operate the platform, such as the payment processor, the hosting provider, and the database provider, each bound to protect the data they process.

Data Retention

Account and course-progress data is kept for as long as an account remains active, plus a reasonable period afterward to handle billing disputes, refund windows, and legal recordkeeping. A full account deletion request removes personal information beyond what is legally required to retain (such as tax records tied to a completed payment).

Your Rights

Any student or visitor can request a copy of the personal information held about them, ask for corrections, or request deletion of their account and associated data by contacting the address listed on the Security & Contact page. California residents have specific rights under the California Consumer Privacy Act to know what personal information is collected and to request its deletion; those requests are honored the same way, even though Core & Cladding currently falls below the CCPA's applicability thresholds.

Children's Privacy

Core & Cladding is a professional trade-certification course intended for users 18 years of age or older. The site does not knowingly collect personal information from anyone under 18. Age is confirmed at signup, and any account found to belong to a minor will be closed and its data deleted.

Data Security

Passwords are stored using industry-standard hashing, never in plain text. Access to the underlying database and hosting infrastructure is restricted to what is needed to operate the site. See the Security & Contact page for how to report a suspected security issue.

Changes to This Policy

This policy may be updated as the platform adds features such as logins, payments, or new integrations. The "Last updated" date at the top will always reflect the most recent revision, and material changes will be highlighted on this page.

Contact

Questions about this policy, or requests to access or delete personal data, can be sent through the Security & Contact page.