1. Introduction
ZeroToBlock ("we", "our", "us") operates the website zerotoblock.com and provides interactive blockchain education content. This privacy policy describes how we handle information collected from visitors and registered users.
By using ZeroToBlock, you agree to the practices described in this policy. If you do not agree, please do not use the service.
2. Information we collect
2.1 Account information
When you create an account, we collect: your email address, a name or display name of your choosing, and a securely hashed password. We never store passwords in plain text.
2.2 Usage data
We collect anonymous usage analytics through Google Analytics and Vercel Analytics, including: page URLs visited, approximate location (country/region), device type, browser, referrer URL and time on page. This data is aggregated and cannot be used to identify individuals.
2.3 Cookies
We use a small number of essential cookies for authentication (keeping you signed in) and analytics. See our cookie policy for the complete list and your control options.
2.4 What we do not collect
- We do not collect cryptocurrency wallet addresses or private keys.
- We do not collect payment information — the core platform is free.
- We do not sell, rent or trade your personal data to third parties.
- We do not run third-party ads on the platform.
3. How we use your information
We use collected information to:
- Authenticate your account and maintain your session.
- Save your course progress and profile.
- Understand how the platform is used so we can improve it.
- Respond to support requests you send us.
- Protect the platform against abuse, fraud and security threats.
4. Legal basis (GDPR)
For users in the European Economic Area, we process personal data under the following lawful bases: contract (to provide the service you signed up for), legitimate interests (to improve and secure the platform), and consent (for non-essential analytics cookies).
5. Third-party services
We rely on a small number of carefully chosen third-party providers:
- Vercel — hosting and edge delivery.
- MongoDB Atlas — database hosting for accounts and profiles.
- Google Analytics — anonymous traffic analytics.
- Vercel Analytics — privacy-friendly performance metrics.
Each provider has its own privacy practices. By using ZeroToBlock you also accept the relevant terms of these providers.
6. Data retention
We keep account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g. fraud prevention logs).
7. Security
We protect your data with industry-standard measures: HTTPS-only transport, hashed passwords (bcrypt), strict server-side authentication, and isolated database access. No system is perfectly secure, but we take reasonable steps to minimise risk.
8. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your account and data.
- Object to or restrict certain processing.
- Request a portable copy of your data.
- Withdraw consent for analytics cookies.
To exercise any of these rights, email us via the contact page.
9. Children
ZeroToBlock is intended for users aged 13 and over. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us and we will delete it.
10. Changes to this policy
We may update this privacy policy from time to time. Material changes will be announced on the website and reflected in the "last updated" date above. Continued use of the service after changes means you accept the updated policy.
11. Contact us
Questions about this policy? Reach us via our contact page. See also our terms of service and cookie policy.