Privacy Policy

Last updated 16 October 2026. This policy explains how CodeX2 Academy, run by CodeX2, handles personal information.

Who we are

CodeX2 Academy is run by CodeX2 (codex2.com.pk). In this policy, "we" and "us" mean CodeX2 in its role of running the academy. You can reach CodeX2 through the contact page, or ask your instructor.

What we collect

The public pages of this website do not ask for any personal information. When you have an account, we hold:

Account details: your name, email address and role (learner or instructor). Your password is never stored; only a one-way hash of it is kept.
Learning records: lessons you complete and when, lab attempts and scores, assessment attempts and scores, and the certificates issued to you.
Security details: the time of your last sign-in, a count of failed sign-in attempts and any temporary lock. If you turn on two-step verification, an encrypted secret and hashed backup codes.
Optional profile photo: only if you upload one.
Technical data: our hosting provider records standard request information such as IP address, time and browser type in server logs.

We do not run advertising or analytics trackers on this site.

How we use it

To create and run your account, and to keep it secure.
To record your progress and show it to you and your instructors.
To issue certificates and let others verify them.
To protect the service, for example by locking an account after repeated failed sign-ins.
To send notices through announcements inside the portal.

Certificates and public verification

Anyone who has a certificate number can look it up without an account. The page shows the holder’s name, the course or path, level, hours, issue date and status. The name printed on a certificate is a copy taken when it is issued. Treat your certificate number like a link you choose to share.

Instructors can see your account details, progress, scores and certificates.
Service providers that host the academy process data for us: Vercel (website hosting) and Neon (database, running in the United States). We do not sell your information.
Video providers. Lessons can embed videos from YouTube. When you play one, YouTube may collect information under its own policy. We use the privacy-enhanced embed.
Legal reasons. We may disclose information if the law requires it.

Where data is stored

The database is hosted in the United States and the website is delivered through a global network. If you use the academy from another country, your information is transferred to and processed in those places.

How long we keep it

We keep your account and learning records while your account is active so that your progress and certificates stay available. Certificates remain verifiable after your account is deactivated. You can ask us to delete or correct your information (see below).

How we protect it

The site is served over HTTPS only.
Passwords are hashed. Sessions use a secure, HTTP-only cookie.
Accounts lock for 15 minutes after five failed sign-ins, and two-step verification is available.
Two-step secrets are encrypted. Certificates are digitally signed.

No system is perfectly secure, so please use a strong, unique password.

Your choices

You can ask to see, correct or delete the information we hold about you, or to object to how we use it. Your name is locked once you hold a certificate because it appears on that certificate; ask your instructor if it needs correcting. You can reach CodeX2 through the contact page, or ask your instructor.

Depending on where you live you may have further rights, including the right to complain to a data protection authority.

Children

The academy is intended for students and working adults. It is not designed for young children. If you believe a child has an account without proper permission, please contact us.

Changes to this policy

If we change how we handle information, we will update this page and its date.