Privacy Policy

Uncharted is a learn-by-doing education platform. We collect the information needed to create your account, remember your path, evaluate lessons, protect the service, and understand whether the product works. We do not sell your personal information.

This policy applies to the Uncharted website, applications, and related services that link to it. It does not govern third-party websites or services that have their own notices.

We collect the following categories of information:

• Account information. Your name, email address, password hash when you use password sign-in, profile image, authentication provider, and related account identifiers.
• Plan information. Your current Free-plan status and related feature or usage access. Pro purchases are not yet available, so we do not currently collect subscription payment details or paid-plan billing records. Before paid subscriptions launch, we will update this policy to identify the billing data collected and the payment provider that processes it.
• Learning profile. The career stage, skills, and interests you choose to share, along with your avatar, earned XP, completed lessons, and completion timestamps.
• Session and security information. Session identifiers, expiration times, IP address, user agent, and records needed to keep accounts secure and diagnose abuse or failures.
• Usage and device information. Google Analytics may receive page views, interactions, browser and device details, approximate location derived from IP, and similar diagnostic information.
• Content you submit. This includes source code and web-project files, answers selected in choice lessons, written answers, profile changes, avatar uploads, and messages you send us.

Code exercises execute in an isolated browser runner on your device. When you submit a code lesson, the service receives the current source code or web-project files and the browser-reported completion result. We store the latest submitted answer with your lesson progress so it is available when you revisit that lesson. AI-graded written explanations use a different process, described below.

We use personal information to:

• create and authenticate accounts, maintain sessions, and provide account support;
• save course progress, calculate XP, recommend next steps, and personalize learning;
• administer Free-plan access and apply current AI usage limits;
• evaluate lesson responses and return relevant feedback;
• operate, secure, debug, measure, and improve Uncharted;
• prevent fraud, misuse, and security incidents; and
• comply with law and enforce our Terms of Service.

Where applicable law requires a legal basis, these activities rely on performing our contract with you, our legitimate interests in operating and securing the service, your consent, or compliance with legal obligations, depending on the context.

If you choose Continue with Google, Google provides the basic account information needed to authenticate you, such as your name, email address, profile image, and a unique provider identifier. Authentication records and tokens may be stored as needed to maintain the connection and secure your account.

We use Google data only to sign you in, create or connect your Uncharted account, display your chosen identity, and protect that account. We do not request access to your Gmail, Google Drive, Contacts, or Calendar. We do not sell Google user data, use it for advertising, or use it to train generalized AI models.

Uncharted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

When you submit an AI-graded written explanation, we save it with your lesson progress. We send the explanation, together with limited lesson context and private grading criteria, to OpenRouter. OpenRouter routes the request to a selected AI model provider, which classifies the explanation against those criteria. Uncharted computes the grading decision from that classification. The AI grading request does not include learner code or web-project files. Do not include sensitive personal information in your explanation.

The product database retains your latest AI-graded written explanation, lesson completion, and XP result so your prior response can be restored. We do not store the model's response in the product database. OpenRouter and the selected model provider process requests under their own terms, policies, and configured retention practices.

Lessons include an optional AI tutor chat with Rini. When you send Rini a message, we send your chat messages for that lesson, together with the lesson content, its hints, and its private answer key, to OpenRouter. OpenRouter routes the request to a selected AI model provider, which generates Rini's reply. Do not include sensitive personal information in your messages to Rini.

We store your Rini conversations with your lesson progress so a conversation can continue when you return to a lesson, and we record the processing cost of each exchange to apply a daily usage limit. Using Rini during a lesson is noted with that lesson attempt. If you and Rini agree that a lesson itself is broken, Rini may send an internal bug report to the Uncharted team through our email delivery provider. The report includes the lesson title and identifier, your account user ID, a model-generated summary of up to 500 characters, and model-generated details of up to 4,000 characters. Those fields may reflect information from your chat. OpenRouter and the selected model provider process tutor requests under their own terms, policies, and configured retention practices.

Pro is planned to provide higher AI usage limits than Free, but it is not yet available. AI use currently follows service-wide limits. If plan-specific limits launch, we will use plan and usage information to determine when an AI feature is available to your account; higher limits will not mean unlimited AI use.

We share information only as reasonably necessary with:

• Service providers that support hosting, databases, private object storage, authentication, transactional email, analytics, security, and automated grading, including Railway, Resend, Google, OpenRouter, and the model provider selected for a grading request.
• Authorities or affected parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or respond to a security incident.
• A successor organization in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We do not sell or rent personal information.

Because Pro purchases are not yet available, we do not currently share subscription billing data with a payment provider. We will update this policy before payment processing begins.

Uncharted uses first-party cookies and similar storage to keep you signed in, protect requests, remember interface state, and maintain core functionality. Blocking required cookies may prevent account features from working.

We also use Google Analytics to understand aggregate traffic and product use. Google may set or read analytics identifiers and process device and activity data. You can restrict cookies through your browser and can use Google's Analytics opt-out browser add-on. Browser privacy controls may also limit certain measurement.

We keep account and learning data, including the latest answers stored with lesson progress, while your account remains active and as needed to provide the service. Session records expire according to their configured lifetime. We may retain limited records longer when reasonably necessary for security, dispute resolution, legal compliance, backups, or enforcing agreements.

We do not currently retain paid subscription or payment records because Pro purchases are not yet available. If paid subscriptions launch, we will describe their retention period here before collecting billing information.

You may ask to access, correct, export, or delete your personal information by emailing support@updates.theuncharted.dev. We will verify the request before acting. Some information may be retained when required by law or when a narrow security or legal exception applies.

We use technical and organizational safeguards designed to protect personal information, including hashed passwords, restricted storage credentials, authenticated service access, and encrypted network transport where supported. No system is perfectly secure, so we cannot guarantee absolute security.

Our providers may process information in countries other than your own. Where required, we rely on appropriate legal mechanisms and safeguards for international transfers.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, withdraw consent, or receive a portable copy of information. You may also have the right to complain to a local data-protection authority.

Uncharted is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under the applicable minimum age provided us information, contact us so we can investigate and delete it where required.

We may update this policy as Uncharted evolves. We will change the effective date and, when a change is material, provide additional notice appropriate to the change. Your continued use after an update means the revised policy applies from its effective date.

Questions or privacy requests can be sent to support@updates.theuncharted.dev. For the rules governing use of the service, read our Terms of Service.