Private learning should stay private.

What Logicnaut stores

• The adult or guardian email used for one-time-code sign-in
• The time the account holder confirmed that they are an adult learner, parent, or guardian
• Private learner profile names, explorer badges, broad learning routes, and goals
• Completed lessons, attempt counts, hint use, XP, Starbits, and cosmetic rewards
• Short-lived security records used for sign-in, sessions, and abuse prevention

Logicnaut does not ask children for email addresses or exact birth dates. Logicnaut Cloud does not save lesson source code, Practice Lab editor contents, chat messages, photos, voice, location, advertising identifiers, or public profile information.

Guest mode and cloud mode

In guest mode, learner profiles remain in browser storage on that device. Clearing browser data removes that guest copy. When an adult or guardian signs in, the current guest profiles can be copied to the private account and synchronized to other signed-in devices.

A secure, HTTP-only session cookie keeps the adult account signed in for up to 30 days. The cookie is sent only to the Logicnaut API and cannot be read by site JavaScript.

How data is used and protected

Data is used only to authenticate the account, restore learner profiles, track course progress, calculate earned rewards, and operate the service. Logicnaut has no advertising, behavioral profiling, public leaderboards, direct messages, or sale of learner information.

Account data is transmitted over HTTPS and stored in encrypted AWS services in the United States. The application API accepts a narrow learner-state format, recalculates XP and Starbits, limits account and request sizes, and rate-limits sign-in codes.

What happens when someone runs C++

The Practice Lab is available only through an adult or guardian-managed cloud session. When the learner presses Run, the current source code and optional keyboard input travel over HTTPS to a separate sandbox broker. They are used only for that run and are not added to the learner profile, progress document, account export, or application logs.

Each run receives a fresh Firecracker-isolated MicroVM with no cloud role and no outbound internet. Compilation and execution have short time, memory, input, and output limits. The compiler result is returned to the browser, then the MicroVM and its temporary workspace are terminated. The Practice Lab does not save drafts automatically.

Retention and control

• Account and learning data remains until the adult account holder deletes it.
• Return sessions expire after 30 days and can be ended immediately by signing out.
• Incomplete sign-in records expire after about 10 minutes.
• Abuse-prevention counters expire shortly after their 15-minute window.
• Operational API logs are retained for 14 days and exclude learner content.
• Sandbox broker logs are retained for 7 days and exclude source code, input, and compiler output.

The signed-in account panel provides a machine-readable data export and permanent account deletion. Signing out can also remove the local learner copy from a shared device.

Children and beta status

Cloud accounts are designed to be managed by an adult learner, parent, or guardian. A child chooses a private explorer profile only after the adult account is available. The account-holder confirmation is a product safeguard, not a substitute for specialist review of every law that may apply.

Logicnaut will complete child-privacy legal review, publish formal terms, and add a direct privacy support channel before moving beyond early beta use. Until then, account export and deletion are available directly inside the product.