Privacy

Short version: we collect as little as we can, we don't use cookies or ad trackers, and we never sell your data. Questions or requests: aicoderclass@gmail.com.

Who we are

AICoderClass (aicoderclass.com, including Radar and Pro) is run by Reuben Hester, 166 Bridgemeadows, Milehouse Road, Enniscorthy, Y21 NX4D, Ireland. We're the "controller" for the data on this page, which means we decide what's collected and why. Contact: aicoderclass@gmail.com. The rules for using the site and buying Pro or Radar are in our terms.

What we collect, why, and on what legal basis

Patch Notes newsletter

Your email, the page you signed up on, any campaign tags in that page's link (utm_source, utm_medium, utm_campaign), which version of the sign-up wording you saw, and when you signed up or unsubscribed. We use it only to send the weekly email. Basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw any time. It's stored in our Cloudflare D1 database. We may move the list to beehiiv, which would then hold it for us as a processor.

Radar waitlist

Your email, your team size, the tools you ticked, the link tags described under "Link tags" below, and when you joined. We use it to tell you about Radar. Basis: your consent (Art. 6(1)(a)). Stored in Cloudflare D1.

Buying Radar or Pro (Stripe)

Checkout happens on Stripe's own pages. Stripe collects your card or other payment details, your email, your country or billing address, and a VAT ID if you add one. We never see your full card number. We use Stripe Managed Payments, so Stripe acts as the merchant of record and sells you the purchase or subscription, while Reuben Hester, a sole trader (address above), provides Pro and Radar and is responsible for them. Stripe handles sales tax/VAT, fraud checks and receipts, and for that part it uses your data under Stripe's privacy policy. If you choose to save your details with Link (Stripe's one-click checkout), that's handled by Link under its own terms.

After you pay, Stripe sends our server a signed message. From it we store your email, your Stripe customer and subscription IDs, your plan, the amount and currency, and your payment and subscription status. For Pro we also store your quiz answers, which travel through checkout as a reference so the right report opens. We don't send Pro buyers alerts or emails: your email is kept only to verify the purchase, handle refunds and answer support. All of this is stored in Cloudflare D1. Basis: to provide what you bought (contract, Art. 6(1)(b)), and keeping billing records because the law says we must (legal obligation, Art. 6(1)(c)).

Pro report unlock

After a Pro purchase we create a random unlock code. We keep only a one-way hash of it, linked to your purchase. The code itself is saved in your browser's local storage (as aicc_pro_token) so your report opens. If you fill in the report's plan check, those answers are saved only in your browser (aicc_pro_plan) and aren't stored by us. To open the report, your browser sends us the code and your quiz answers. We check the code against the hash and don't store the request. Basis: contract (Art. 6(1)(b)). You can delete both items by clearing this site's data in your browser.

Site analytics (Cloudflare Web Analytics)

We count page views and measure page speed with Cloudflare Web Analytics. It doesn't use cookies or local storage, and Cloudflare says it doesn't fingerprint visitors or track them across other sites (Cloudflare's docs). Basis: our legitimate interest in knowing which pages work (Art. 6(1)(f)).

Link tags (where a visit came from)

Some links to our site carry tags like utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref or via. Every page passes them along: when you click a link to one of our own pages that we track (the quiz, your results, the team seat-cost calculator or /radar), the page copies the tags from the address bar onto that link at the moment you click, so they just travel in the next page's address. We only carry that fixed list of tags, tidy them to plain letters and numbers (64 characters max), never add them to links to other websites, and leave a link alone if it already has its own tags. Nothing is stored in your browser for this: no cookies, no local storage, no session storage, and carrying the tags along doesn't send us anything by itself. Links on the calculator page that lead to /radar (its buttons, text links, menu and footer) also add ref=team-cost (unless the link you came in on had its own ref) and the link's name as via, so we know which one you used. If a visit to /radar or the calculator has no tags, those pages note the website you came from (just its name, like news.ycombinator.com) when your browser shares it. The tags are only saved when you do something: join the Radar waitlist (saved with your waitlist entry), click through to checkout (passed to Stripe as a checkout reference; with no tags and no referrer it just says direct), use the calculator or the /radar checkout button (included in the anonymous events below), or sign up for Patch Notes (just utm_source, utm_medium and utm_campaign). If you use the seat-check button on the calculator, the email's subject line includes the link tag (for example [x-quote-somehandle], or [site] with no tags) and the body is filled in with what you entered in the calculator; you can see and change both before you send. Basis: legitimate interest in knowing which links and posts actually help people (Art. 6(1)(f)).

Calculator and button events

The team seat-cost calculator and the /radar checkout button send us small anonymous events: what happened (for example "calculator finished"), the page, a team-size range, which button was clicked, any link tags, and a random ID that lives only in memory for that one page view. No email, no IP address, no browser details. Basis: legitimate interest (Art. 6(1)(f)).

Spam protection

To stop bots flooding our forms and events, we keep a salted one-way hash of your IP address with a hit count for a short time window (1 minute for events, 10 minutes for forms). We never store the raw IP, and old windows are cleaned out automatically. Basis: legitimate interest in keeping the service working (Art. 6(1)(f)).

Emails to us

If you email aicoderclass@gmail.com, we get your address and whatever you write, and we use it to reply and help. Basis: contract when it's about something you bought, otherwise legitimate interest (Art. 6(1)(b) or (f)).

When we email businesses about Radar

Now and then we email a business to offer a free check of its team's AI coding subscriptions and tell it about Radar. These emails come from aicoderclass@gmail.com. What we use: the business's name, the role of the person we write to, public business contact details (like a company contact address or form) and public posts where the business talks about the AI tools it uses. Where it comes from: public business info, such as company websites and public profiles. We don't buy lists or hunt for personal email addresses. Basis: legitimate interest in offering businesses something relevant to their work (Art. 6(1)(f)). Business email is covered by the Irish ePrivacy Regulations (S.I. No. 336 of 2011, Regulation 13), so we only email business addresses, only about your team's AI tools, and we say who we are in every email. Opting out: reply "stop" or email us and we stop right away. We keep a short suppression record (business name, email address and opt-out date) so we never contact you again by mistake.

Cookies

We don't set cookies. The only thing we save in your browser is the Pro unlock code and your Pro plan-check answers (local storage, explained above), and only after you buy Pro. Stripe's checkout pages are on stripe.com, and Stripe may use its own cookies there.

Who else handles your data

• Cloudflare: hosts the site, our D1 database and the analytics.
• Stripe: payments, including Link and Managed Payments (as merchant of record, Stripe also acts under its own policy).
• Google (Gmail): our email inbox. It's a regular Gmail account, so Google handles that email under its own privacy policy.
• beehiiv: only if we move the newsletter there.

International transfers: our Cloudflare D1 database runs in Cloudflare's Western North America region, so the data we store is held in the US. Cloudflare relies on the European Commission's Standard Contractual Clauses (SCCs) and is certified under the EU-U.S. Data Privacy Framework. Stripe uses the SCCs and complies with the EU-U.S. Data Privacy Framework. Google relies on the EU-U.S. Data Privacy Framework and on SCCs where needed. If we move the newsletter to beehiiv, beehiiv says it uses SCCs where appropriate.

How long we keep it

• Business outreach: 3 months after our last email, unless you become a customer. Opt-out suppression records are kept so we can keep honouring them.
• Newsletter: until you unsubscribe. After that we keep a record that you unsubscribed, so we don't email you again.
• Radar waitlist: until you unsubscribe, or 6 months after launch (9 May 2027) if you don't buy.
• Customers: while your subscription or purchase is active. Billing records are kept for 6 years, as Irish tax law requires.
• Calculator and button events: Calculator usage events (event type, page, team-size range and campaign tags, with no IP address, cookie or identifier that survives a page reload) are deleted after 180 days.
• Emails to us: kept 2 years after the last message.
• Spam-protection hashes: cleaned out automatically, usually within hours.

Your rights

You can ask us for a copy of your data (access), to fix it (rectification), to delete it (erasure), or to send it to you in a machine-readable format (portability). You can object to anything we do on the basis of legitimate interest, and for direct marketing your objection always wins. Where we rely on consent, you can withdraw it any time. Just email aicoderclass@gmail.com. If you're not happy with how we handled something, you can complain to the Data Protection Commission in Ireland: dataprotection.ie.

Changes

If we change how we use your data, we'll update this page and the date at the top. If it's a big change, we'll also email the people it affects.