Security & Contact

Payment Security

All payments are handled by Stripe, a payment processor certified at PCI DSS Level 1, the highest level of certification available in the payments industry. Card numbers and other sensitive payment details are entered directly into Stripe's secure checkout and never pass through or get stored on Core & Cladding's own servers or database.

Account and Data Security

Passwords are stored using industry-standard hashing rather than plain text, so no one at Core & Cladding can view a user's actual password. Access to the hosting and database infrastructure is limited to what is needed to operate the site. Full detail on what account and course data is collected and how it is used is available in the Privacy Policy.

Reporting a Security Issue

Anyone who discovers a vulnerability, a data exposure, or any other security concern on this site is asked to report it directly rather than posting it publicly, so it can be fixed before it is exploited. Reports can be sent to the email below with a short description of the issue and, if possible, steps to reproduce it.

Privacy and Data Requests

Requests to access, correct, or delete personal information, including requests under the California Consumer Privacy Act, can be sent to the same address below with the subject line "Data request." A response should be expected within 30 days.

General Contact

Course questions, billing and refund requests, and general support all go to the same inbox, monitored directly by David Osisek.

Core & Cladding is operated from Portland, Maine.