🔒 Privacy
Home › Privacy
Last updated: 23 October 2026.
Lessons, quiz scoring and document generation run in your browser. No account is needed. The full name and function (job title) you enter at the start of a course are saved in your browser's local storage with your course progress, and are printed on the certificate PDF that is generated on your device. Clearing this site's browser data removes these local records.
Training and certificates do not use any sign-in. Google sign-in is used only by trainers who publish a listing: Google and our shared AMAADOR Supabase authentication project then process the trainer's account identity (name, email, avatar, account identifier).
Publishing a trainer listing sends the profile fields you submit to Supabase, including your name, contact email, biography, specialities, location, rates and any links or photo URL. Published listings are public so learners can contact you directly. You can edit or remove your listing while signed in. If you cannot access your listing, or want help deleting your authentication record, contact youssef@amaador-hse.com. Removing a listing cannot remove copies already saved by other people or search engines.
Controller: Youssef Amaador, AMAADOR ACADEMY (amaadoracademy.com). Contact: youssef@amaador-hse.com.
Purpose and legal basis: to let anyone holding your certificate check that it was issued by the academy. When you pass a course, the registry on our host (Hostinger) records the certificate ID, the course, the date, the score and your full nameonly your initials (your full name is not stored). Your function / job title is never sent to or stored by the registry. You give this information voluntarily by starting a course; the gate notice tells you before you start.
What is public: the certificate QR code contains only the verification address with the certificate ID (amaadoracademy.com/c/<ID>) — no name or job title. That page is public to anyone who has the ID and shows your full nameyour initials, the course, the date and the status (valid / revoked). It is marked noindex for search engines. A revoked or erased certificate shows no name.
Security: your IP address is used, in hashed form, only to rate-limit certificate requests; these counters are deleted after 24 hours. Identity is self-declared and is not checked against an ID document.
Retention: registry records are deleted 3 years after issue.
Your rights (Law 09-08): you can ask for access, correction, erasure or anonymisation of your registry record, or object to it, by emailing youssef@amaador-hse.com with the certificate ID. Erasure removes your name from the registry; the verification page then shows the certificate as revoked with no name. Copies you have shared yourself (PDFs, screenshots) cannot be recalled.
Complaint: you can lodge a complaint with the Moroccan data-protection authority, the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), www.cndp.ma.
If you open the Stripe contribution link, Stripe processes the information you provide under Stripe's privacy policy. Scanning the Simple payment QR opens your chosen payment service, which processes payment information under its own terms. The academy does not receive your card details through these links. Contact the relevant provider about payment records.
Hosting, Google Fonts, library delivery services and any external content you choose to open receive the technical information needed to deliver their services, such as your IP address and browser details. Optional external links and sign-in services have their own privacy policies.
Advertising remains disabled. Google Analytics is optional and is available only on selected public discovery pages after a visitor opts in. Advertising must remain disabled until a consent platform is configured and verified; learning, exam, certificate and verification pages remain ad-free. No newsletter delivery provider is enabled. A newsletter preference saved on your device does not by itself subscribe you to an email service.
Optional Google Analytics measures visits to selected public home, about, catalogue and learning-path discovery pages only after you choose Accept analytics. Learning, exam, certificate, verification, payment and private-profile activity are excluded. Declining never blocks learning or site features. Analytics preferences lets you refuse or withdraw; withdrawal stops subsequent collection but cannot undo a request already sent. We save this analytics-only choice on this device for up to 180 days. Browser Do Not Track, Global Privacy Control and recognized Analytics opt-outs keep measurement off. No Google analytics tag is loaded before this choice. The integration sends a constant public-page title and URL without query strings or fragments, with an empty referral field. It does not send names, form entries, learner progress, certificate codes or document contents. Google may process technical information such as IP address, device/browser details and Analytics cookies after consent. Automatic interaction measurement, Google signals and ad personalization are disabled. This choice does not enable advertising. Google applies its own privacy and retention policies; clearing local data does not remove information already held by Google.
The academy is intended for professionals and adult learners and is not directed at children under 13.
Questions about privacy, or requests about your data? Email youssef@amaador-hse.com.