Privacy

This site is free, carries no advertising, and is not funded by anyone. There is nothing to gain from collecting data about you, so it does not.

Effective 11 August 2026 · version 1.0
No analytics. No Google Analytics, no pixels, no heatmaps, no session recording.
No advertising, no ad networks, no tracking cookies.
Your data is never sold, rented or shared for marketing.
The first three lessons of every track are open without an account, and while you are signed out nothing is sent to our servers.
You can delete your account and everything in it yourself, instantly.

Who is responsible

ML Academy (mltraining.org) is built and run by Cagri Temel as an individual, not by a company. If you have a question, a request about your data, or a complaint, write to privacy@mltraining.org.

If you do not create an account

Nothing about you is sent to our servers. Lessons run entirely in your browser.

Your progress is kept in your own browser using localStorage, not cookies. These are the keys, and you can inspect or clear them yourself at any time:

KeyWhat it holds
mlacad_v2Which lesson steps you finished and your XP
mlacad_dilWhether you chose English or Turkish
mlacad_temaWhether you chose the light or dark theme
mlacad_rota_sorulduWhich tracks already showed you the review prompt

Clearing your browser data deletes all of it. There is no copy anywhere else.

One unavoidable exception applies to every website: to load a page, your browser has to connect to the servers hosting it. GitHub Pages serves the site and jsDelivr serves two libraries. Those services see your IP address as part of delivering the files. We do not receive, store or have access to those logs.

If you create an account

An account exists so your progress follows you between devices and so you can leave a review. This is everything it stores:

DataWhyGiven by
Email addressSigning in, confirming your address, resetting your passwordYou
PasswordSigning in. Stored only as a cryptographic hash. Nobody, including us, can read it.You
Full nameShown on your review if you write oneYou
RoleUnderstanding who the lessons are reaching, in aggregate onlyYou
Organisation or schoolOptional. Same reason as above.You
Lesson progress and XPResuming where you left off on any deviceYour activity
Your review and ratingPublished on the site after moderationYou, if you write one
Account timestampsWhen you signed up and last signed inAutomatic

Reviews are public

If you write a review, the display name you choose, your star rating and your text appear publicly on the home page once approved. Your email address, role and organisation are never shown. A review is not published until a moderator approves it, so a moderator reads it first. You can change or delete your review at any time.

What is never collected

No date of birth, no phone number, no address, no payment details, no location, no device fingerprint, no browsing history outside this site. The site has no payment integration of any kind.

Who processes the data

The site is small and uses three services. Each one only receives what it needs to do its job.

ServiceWhat it doesWhat it receives
Supabase (United States)Database and sign-inEverything listed in the account table above
Resend (United States)Sends confirmation and password-reset emailsYour email address and the message sent to it
GitHub PagesServes the pages themselvesStandard web request data, including your IP address
jsDelivrServes two open-source librariesStandard web request data, including your IP address

Because these providers are based in the United States, your data may be stored and processed there. If you are in the European Economic Area or the United Kingdom, that transfer relies on the providers' standard contractual clauses.

How long it is kept

Your account data is kept for as long as your account exists. When you delete your account it is removed immediately, along with your profile, your progress and your review. There is no grace period and no archived copy.

Email providers keep delivery logs for a limited period for anti-abuse purposes. That log records that a message was sent to your address, not what you did on the site.

Deleting your account

Sign in, open Your account in the top bar, and use the delete section. You have to type your own email address to confirm, because the action cannot be undone.

Deletion is immediate and complete. Your profile, your lesson progress and your review are removed in the same operation.

If you cannot sign in for any reason, email privacy@mltraining.org from the address on the account and it will be deleted for you.

Your rights

Wherever you live, you can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. If you are covered by the GDPR (European Economic Area, United Kingdom) or by KVKK (Türkiye), you additionally have the right to object to processing, to restrict it, to receive your data in a portable format, and to complain to your local supervisory authority.

The lawful basis for the account data is the contract between us: you asked for an account, and these fields are what an account needs. There is no processing based on legitimate interest for marketing, because there is no marketing.

Children

You need to be at least 13 to create an account, and at least 16 if you are in a country where that is the minimum age for consent. The first three lessons of every track are open to everyone without an account and collect nothing.

Security

Passwords are hashed by Supabase and never stored in readable form. Every table uses row-level security: the rules live in the database, not in the browser, so one signed-in user cannot read another user's profile or progress even by crafting a request. The database rules are public and can be read in the repository.

No system is perfect. If you find a way to reach data you should not, please write to privacy@mltraining.org before publishing it, and it will be fixed and credited.

Changes

If this policy changes in a way that affects you, the version and date at the top change and, if the change is significant, you will be told by email. Every previous version is in the repository's commit history.

Türkçe özet

Bu site ücretsizdir, reklam içermez ve hiçbir analitik ya da izleme aracı kullanmaz. Hesap açmadan kullanırsan sunucuya hiçbir veri gitmez; ilerlemen yalnızca kendi tarayıcında saklanır. Hesap açarsan e-posta adresin, adın, ünvanın, isteğe bağlı olarak kurumun, ders ilerlemen ve yazarsan yorumun saklanır. Şifren yalnızca özet (hash) olarak tutulur, kimse okuyamaz.

Veriler Supabase (ABD) üzerinde tutulur, e-postalar Resend (ABD) üzerinden gönderilir. Hesabını üst çubuktaki Hesabım ekranından kendin silebilirsin; silme anında ve kalıcıdır, profilin, ilerlemen ve yorumun birlikte gider. KVKK kapsamındaki haklarını kullanmak ya da soru sormak için privacy@mltraining.org adresine yazabilirsin.