Privacy Policy
In short: we collect as little as possible. For your account we ask only for your email — no name, no address, no date of birth. When you message us through the contact form we also ask for your name and phone number, because without them we cannot reply to you.
Last updated: 7 October 2026What do we collect?
Your email — for the account, and it is the only thing we ask for so you can sign up. We use it to sign you in and to link the courses you bought to your account.
Your course progress — which lessons you have finished, so you can continue where you left off.
Your review, if you write one — the stars and the text you write yourself.
Contact form data — if you message us. Fully detailed in the next section.
Your newsletter email — if you subscribe through the form at the bottom of the page. Alongside it we store a hashed fingerprint of your IP address (a salted hash) only to prevent automated sign-ups, and it cannot be turned back into an address.
There is no profile page, and we do not ask for your address, your date of birth, or anything else we have no need for.
When you message us
What we ask for: your name, email, phone number, request type, and the text of your message. Company name is optional. All of it serves one purpose: so we can reply to you.
Why the phone number is required: because it is the fastest way for us to get back to you — usually on WhatsApp, the same day.
IP address: we do not store it. We store a hashed fingerprint of it (a salted hash) to prevent spam and repeated automated submissions. The fingerprint cannot be turned back into an address, and we cannot tell who you are from it.
Browser and device type — we store this so that, if your problem is technical, we can understand it without having to ask you.
Telegram alert: as soon as your message arrives, we receive an alert containing your name, email, phone number and message text, so we can reply quickly. Telegram can see this alert.
How long we keep it: up to two years from our last contact, after which it is deleted. You can ask for it to be deleted sooner, at any time.
What do we not collect?
Your card details — they never pass through us and we do not store them. All payment happens at Stripe.
We do not sell, rent, or share your data with advertisers. Ever.
Who sees your data?
Supabase — stores your account and progress.
Stripe — processes card payments.
Vimeo — hosts the videos, locked to the qacart.com domain.
Vercel — runs the site, and its technical logs see your IP address, like any hosting provider.
Resend — delivers emails: sign-in codes, purchase receipts, and the newsletter. It sees your email and the message text.
Cloudflare Turnstile — checks that whoever requests a sign-in code is a person, not a bot. It sets no cookies, and sees your IP address and browser details only during the check.
Telegram — receives the alert for your message if you contact us through the contact form.
Each of them sees only what it needs in order to work. And we do not sell your data to anyone.
Emails we send
Sign-in codes and purchase receipts reach you because you requested them or because you made a purchase. These are not marketing emails, and you cannot unsubscribe from them as long as you have an account.
The newsletter reaches you only if you subscribed to it yourself through the form at the bottom of the page.
Platform news for our past students: if you have previously bought a course from QAcart, we may send you news about the same platform you bought from — such as the launch of a new version or a new course. The basis for this is the purchase relationship between us, not general marketing consent, and you can stop it at any moment.
Every marketing email contains an unsubscribe link on qacart.com that works on the first click, with no sign-in and without us asking you why.
Your rights
You can ask for a copy of your data, or ask for your account to be deleted entirely — we delete the account, your progress and your reviews, and the messages you sent through the contact form.
Email us at hello@qacart.com from the same email you registered with, and we will complete it within days. We also accept the request through the "Contact us" page.
Unsubscribing from the newsletter removes you from the marketing email list only — your account and your courses stay as they are.
Note: deleting your account cancels your access to the courses you bought, and there is no refund of the amount paid.
Cookies
We use one essential cookie: the one that keeps you signed in. There are no tracking cookies and no advertising cookies.
Something unclear on this page, or want to request a copy of your data or its deletion? Ask us and we'll reply within one business day.