← Back to Cert IT Trainer

Privacy Policy

Last updated: July 13, 2026 · privacy@gridcommand.ca

The short version: We use Google Analytics to see how people use the site so we can improve it. We don't sell your data, show you ads, or share anything with third parties beyond what's listed here. You can turn analytics off at any time.

1. Who We Are

Cert IT Trainer is built and operated by Gridcommand, based in Canada. Our designated Privacy Officer can be reached at privacy@gridcommand.ca. This policy applies to app.gridcommand.ca and gridcommand.ca.

2. What We Collect

If you create an account, we store your email address, display name, and a hashed version of your password (we cannot read it). We also save your study progress including XP, streaks, quiz history, and bookmarks. If you sign in with Apple, we store your Apple ID instead of a password.

If you accept analytics, Google Analytics collects the pages you visit, how long you spend on them, your device and browser type, your approximate location (country and city level, not your address), and how you found the site. None of this is linked to your account.

If you decline analytics, nothing is collected beyond what's needed to run your session.

3. Why We Collect It

Account data is used to save your progress and let you sign in across devices. Analytics data helps us understand which certifications are most studied and where the experience could be better. That's it.

4. Legal Basis

We follow Canada's PIPEDA and Quebec Law 25. For visitors in the EU, we rely on your explicit consent under GDPR Article 6(1)(a). Analytics only activates after you click Accept on the cookie banner. Declining means nothing is collected.

5. How Long We Keep Your Data

Your account and progress data is kept until you delete your account, which you can do from the app settings at any time. Google Analytics keeps event data for 2 months and user-level data for up to 14 months.

6. Who We Share Data With

We do not sell or trade your information. The only third parties involved are:

These service providers are located in the United States. Your personal information is transferred outside Canada and Quebec when processed by these providers. We have assessed that adequate safeguards are in place (standard contractual clauses and equivalent protections under the respective providers' terms). If you are in Quebec, this constitutes communication of personal information outside Quebec under Law 25.

7. Your Rights

You can access, correct, or delete your data at any time. Account deletion is available in the app settings and removes everything we hold. You can also withdraw analytics consent below, or email us at privacy@gridcommand.ca with any request. EU users can also contact their national data protection authority.

8. Cookies and Local Storage

We store a few items in your browser's local storage to keep the site working: your login token, display name, user ID, theme preference, and your analytics consent choice. These are necessary for the site to function and are not shared.

If you accept analytics, Google sets its own cookies (_ga and related). These are removed if you withdraw consent.

9. Turn Off Analytics

You can withdraw consent at any time using the button below. This removes the GA cookies and stops all future collection.

You can also use the Google Analytics Opt-out Browser Add-on to block GA across all sites.

10. Security

All passwords are hashed with bcrypt before being stored. All traffic between your device and our servers is encrypted over HTTPS. We apply access controls to limit who and what can reach the database, and we review our security practices regularly. No system is completely immune to risk, and we encourage you to use a strong, unique password for your account.

11. Data Breach Notification

If we become aware of a security incident that puts your personal information at risk, we will notify the relevant privacy authority and affected users as required by law. If you believe your account may have been compromised, contact us immediately at privacy@gridcommand.ca.

12. Children

This site is not intended for anyone under 13 and we do not knowingly collect information from children. If you believe a child under 13 has provided us personal information, please contact us and we will delete it promptly.

13. Changes

If we update this policy the date at the top will change. Continued use of the site after an update means you accept the revised policy.

14. Contact & Privacy Officer

Our Privacy Officer handles all privacy-related requests and inquiries:
privacy@gridcommand.ca
Gridcommand, Canada

EU residents may also contact their national data protection authority. Quebec residents may contact the Commission d'accès à l'information (CAI).


app.gridcommand.ca and gridcommand.ca are operated by Gridcommand, Canada