Skip to main content
Draco Learning Draco Learning

Privacy Policy

How we collect, use, store, and protect your personal information. Last updated 2026-05-12.

This Privacy Policy describes how Draco Learning ("we", "us") collects and uses your personal information when you visit dracolearning.com or use our educational services.

1. Information we collect

  • Account information — name, email address, and password (stored as a salted bcrypt hash).
  • Enrollment information — programs you enroll in, your progress, and completion records.
  • Payment information — handled by Stripe. We do not see or store your card details; Stripe shares a transaction reference and the amount paid.
  • Usage data — pages visited, IP address, browser, and time stamps, used for security and abuse-prevention purposes.
  • Cookies — a single session cookie (DL_SESSION) to keep you signed in. No third-party advertising cookies.

2. How we use it

  • Operate, secure, and improve the platform.
  • Deliver the programs and certificates you enroll in.
  • Send transactional emails (verification, password reset, enrollment receipts).
  • Detect and prevent abuse, fraud, and security incidents.

3. How we share it

We share personal information only with the service providers we need to operate:

  • SendGrid — to deliver transactional emails.
  • Stripe — to process payments.
  • Google reCAPTCHA — to protect forms from automated abuse. Google may collect device and behavioral signals subject to Google's Privacy Policy.

We do not sell your personal information.

4. Data retention

We keep account, enrollment, and payment-reference records for as long as your account is active and for a reasonable time afterward to satisfy legal, accounting, or reporting requirements. You can request deletion at any time by contacting us.

5. Security

We use industry-standard safeguards: HTTPS everywhere, bcrypt password hashing, CSRF protection on every form, Google reCAPTCHA on every form, rate limiting on authentication endpoints, and a strict Content Security Policy. No method of transmission or storage is 100% secure, but we work hard to protect your data.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, email ddraconum@gmail.com.

7. Children

Draco Learning is intended for adult learners pursuing healthcare credentials. We do not knowingly collect personal information from anyone under 13.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site and, where appropriate, via email.

9. Contact

Questions about this policy? Email ddraconum@gmail.com.