Copilot Masterclass

Privacy policy

Last updated 31 Oct 2026

Copilot Masterclass collects as little personal data as it can. This page explains what, why and for how long.

What we collect

• GitHub sign-in: your GitHub user ID, username, display name, avatar URL and verified email addresses. We request the read:user and user:email scopes only — never repository access — and we don't store your GitHub access token.
• Purchase record: your GitHub user ID linked to a Lemon Squeezy order ID, the purchase email and date, so we can grant access.
• Session cookie: a signed, HTTP-only cookie (cm_session) holding the sign-in details above, valid for 7 days. It's strictly necessary for the site to work. A short-lived cm_oauth cookie protects the sign-in flow.
• Theme preference: stored in your browser's local storage, never sent to us.

Payments

Card and billing details go directly to Lemon Squeezy, our merchant of record, and are governed by their privacy policy. We never see your card number.

Processors

• Vercel — hosting and request logs.
• Upstash — the database holding purchase records.
• Lemon Squeezy — payments, tax and receipts.
• GitHub — sign-in.

Retention and your rights

Purchase records are kept while your access is active and as long as required for tax and accounting. You can ask us to access, correct or delete your data at any time by replying to your Lemon Squeezy receipt email; deleting your purchase record ends your access.

No tracking

We don't use advertising or third-party analytics cookies.