Privacy
insideout is a place to learn how AI works by building it in your browser. This page says what we collect, why, and what you can do about it. We don't sell your data and we don't show ads.
What we collect
If you sign in
- Your account. Your email address. If you use Google, also your name and profile picture from Google.
- Your progress. Which jobs and units you've finished, the code in your files, and where you left off, so you can pick up on any computer.
- Your plan. Whether you're on the free plan or a paid one.
Whether or not you sign in
- How you use insideout. Pages and sections you view, buttons you press, what you type into search, in lessons: how far you read, your answers to the prediction questions, which labs you try and when you finish, and in the workshop: each time you run code (whether it passed, which check failed, any error, and the first 4,000 characters of the code), hints, traces, predictions, what you type to Echo, and pasted code. We use this to find where people get stuck and make the lessons better.
- Where you came from. The site that linked you here and any campaign tags in the link.
- Your rough location. Your country, region and city, worked out from your internet address when a page loads. We don't keep the address itself.
- Your device. Screen size, language, time zone, and whether it's a phone. Not your exact location.
- Your country. Worked out from your internet address when a page shows prices, so you see them in your own currency where we can (US dollars otherwise), at the price for your country. It's kept in your browser and goes with a payment, so the right price is charged.
- Errors. When something breaks on our side, so we can fix it.
Each browser gets a random id the first time it visits. When you sign in, what that browser did is linked to your account. When you sign out, the browser gets a new id.
Your Python code runs in your own browser. It isn't sent to us to run.
What we store on your computer
We use your browser's local storage and a few first-party cookies for counting visits. No advertising cookies:
insideout-echo-v3: your progress on this computer.sb-…-auth-token: keeps you signed in.io-anon,io-session,io-first: the random id, the current visit, and where your first visit came from.io-region: your country, for prices.io-offer: whether you've been shown the welcome offer, when it ends, and a count of the seconds you've spent on the site before it.ml_vid,ml_sid: cookies from our own visit counter. A random visitor id (kept for a year) and the current visit (30 minutes).
Who else handles it
- Supabase stores accounts, progress and usage data (servers in Tokyo, Japan).
- Cloudflare runs our own visit counter (Minilytics, which we host ourselves). It records the pages you view, where you came from, your rough location, browser and device, and payments. If you're signed in, it also gets your account id and email, so a payment can be matched to the visit that led to it.
- Google, if you choose "Continue with Google".
- Font and code libraries (Google Fonts, Fontshare, jsDelivr, cdnjs) send files to your browser and see your IP address when they do.
How long we keep it
Account and progress data stays until you delete your account. Usage data is kept to improve insideout, and is deleted with your account.
Your choices
- Delete everything. Signed in, open your name in the top bar and choose Delete account. That removes your account, your progress and the usage data linked to it, straight away.
- Use it without an account. Everything works without signing in. Your progress stays on your computer.
- Ask us. To see, correct or delete your data, email help@insideout.sh.
Children
insideout is not meant for children under 13, and we don't knowingly collect their data.
Changes
If this page changes in a way that matters, we'll say so on the site before it takes effect.