Privacy Policy

Last updated: 11 March 2026

Data controller

Course Imports is operated as an independent project. For data protection queries, contact [email protected].

What data we collect

When you sign in with GitHub, we receive and store the following from your GitHub profile:

  • GitHub username
  • Email address
  • Avatar URL
  • GitHub user ID

When you submit a course, we store the repository URL and metadata fetched from GitHub (title, description, topics, author name).

Why we process your data

We process your data for the following purposes:

  • To authenticate you and manage your account
  • To display your submitted courses in the public registry
  • To validate course repositories via the GitHub API

Legal basis

Under UK GDPR Article 6, we process your data on the following bases:

  • Legitimate interests (Article 6(1)(f)) — operating the registry and displaying submitted courses
  • Consent (Article 6(1)(a)) — you choose to sign in with GitHub and submit courses

Data retention

Your account data is retained for as long as your account exists. If you delete your account, all associated personal data is removed. Course metadata may be retained in anonymised form.

Third-party sharing

We do not sell or share your personal data with third parties. The following services process data on our behalf:

  • GitHub — authentication provider; subject to GitHub's privacy statement
  • Hosting provider — servers are located in the EU; your data may be transmitted to and stored on these servers

Cookies

This site uses two cookies, both strictly necessary:

  • Session cookie (_course_imports_api_session) — keeps you signed in; expires when you close your browser
  • Cookie notice (cookie_consent) — records that you have seen the cookie notice; expires after 365 days

We do not use analytics, tracking, or advertising cookies.

Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data and account
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Complaint — lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact [email protected].

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will be revised accordingly.