Privacy notice

This notice describes how the operator of LuluSkill handles information on luluskill.com and in accounts created on it. “LuluSkill”, “we” and “us” refer to the operator of this service. Use the contact channel below for privacy questions and requests.

Accounts are provided through Clerk, a third-party sign-in service. You sign in with a one-time code sent to your email address. There are no passwords, and LuluSkill never receives or stores a password. Clerk handles email verification and the sign-in session under its own terms and privacy policy.

Please do not paste passwords, API keys or other secrets into a project or a brief. They would be stored as ordinary text.

Adcash and its advertising partners process advertising data only after your permission, as described in the Adcash notice. Google AdSense remains disabled. Other sharing is limited to the service providers described here or legal requirements.

Google AdSense is not enabled on LuluSkill. Adcash Display may appear on eligible public pages only after your explicit permission. The following Google AdSense paragraphs describe how it would work if it were enabled. The separate Adcash notice below explains its cookies, purposes and withdrawal controls.

If advertising is ever switched on after a new application is approved, the Learn overview would show at most one advertisement, clearly labelled “Sponsored · Advertisement”, after the article content, and each Learn article at most two, labelled the same way: one between two sections partway through the article and one after the article content. Advertising would never appear on sign-in, account, project, Studio, run-approval or security pages, or on these legal and contact pages.

Visitors in the European Economic Area, the United Kingdom and Switzerland, and visitors whose location cannot be determined, will first see Google’s consent message (Google Privacy & messaging, which uses the IAB Transparency and Consent Framework). No advertising script loads unless you consent there; if you do not consent, no advertisement is shown to you and no advertising cookie is set. Elsewhere, the advertising script also loads only after Google’s consent tool has answered.

You can change or withdraw your choice at any time. When the consent message goes live, a “Privacy and cookie settings” link will be added to the site so you can reopen it; deleting this site’s cookies in your browser also clears your choice, and the message will ask again. Withdrawing stops new advertising requests from then on.

LuluSkill counts how the site is used in two ways, so it can tell which pages and tools actually help. Neither sets a cookie, stores anything on your device or gives you an identifier, and neither is used for advertising.

If your browser sends Do Not Track or Global Privacy Control, LuluSkill sends none of its own product counts. Cloudflare Web Analytics runs on every page for every visitor and still counts the page view, without cookies or an identifier. It is not part of the advertising described above and does not wait for the advertising consent message, because it stores nothing on your device and is not used for advertising.

The product counts are kept in Cloudflare Workers Analytics Engine for about three months and are then deleted automatically. Cloudflare Web Analytics data is kept by Cloudflare under its own privacy policy.

Account and project data is kept in LuluSkill’s server-side database, which runs on Cloudflare. Identity data held by Clerk is kept by Clerk. Your information may be processed in the United States and in other countries where these providers operate.

One thing is kept only on your device, and only if you ask: when you tick “Remember on this device” in the “About you” step, your answers (the choices you tapped, never typed text) are saved in this browser’s local storage and are never sent to LuluSkill. The cookie notice names the item and explains how to delete it.

No fixed retention period has been set. Account and project data is kept while your account exists, and deleted when you ask for the account to be deleted. Request logs are kept by Cloudflare under its own practices.

You can change your language and colour scheme at any time. There is not yet a self-service way to export your data or delete your account, so those requests are handled by email.

To ask for a copy of your data, a correction, or the deletion of your account and its data, write to contact@luluskill.com from the email address linked to your account, so the request can be matched to it.

When Do Not Track or Global Privacy Control is enabled, LuluSkill sends no anonymous product counts and requests no Adcash advertising. Cookieless Cloudflare page-view statistics still run. Otherwise Adcash requires your explicit permission, which can be withdrawn in Advertising privacy settings.

This notice does not limit your rights under applicable law. The separate Adcash notice explains advertising choices and withdrawal; the Google AdSense paragraphs describe a disabled integration.

You can ask to access, correct or delete your personal information by writing to contact@luluskill.com. We may need to verify that the request concerns your information before acting on it. Making a request does not change how the service treats you.

LuluSkill is not directed to children under 13, and you must be at least 13 to use it or create an account. It does not knowingly collect personal information from children under 13.

If you believe a child under 13 has created an account, write to contact@luluskill.com and the account and its data will be deleted.

This notice takes effect on the date shown at the top of the page, which changes whenever the notice does. It already describes the Google advertising planned for the learning pages. If LuluSkill starts collecting or using personal information in any other new way, this notice will be updated before that change takes effect.

For questions about this notice or your personal information, write to contact@luluskill.com.