Privacy policy
Last updated: 14 September 2026
What we collect
DataLane is a static website. Accounts are optional. We do not collect personal information directly, with these exceptions:
- Contact and Write for us forms: name, email, and the fields you submit are sent through FormSubmit to srinivasa8511@gmail.com. FormSubmit is the processor for that delivery. Do not send secrets or credentials.
- Google or GitHub sign-in: if you choose those buttons, the provider sends us your name, email, and (when available) profile photo so we can create a session. GitHub sign-in uses a first-party HttpOnly cookie on this domain, signed with AUTH_SECRET. Google sign-in verifies an ID token (or access token) with Google, then stores the session in this browser. Passwords for email accounts never leave this device; they are stretched with PBKDF2.
Cookies and local storage
This section is our cookie policy. We use first-party storage on your device. Nothing here is sold or used to identify you across other sites:
| Name | Purpose | Type | Duration |
|---|---|---|---|
theme | Light or dark mode preference | Strictly necessary (localStorage) | Until cleared |
saved-posts | Articles you bookmark on the Saved page | Strictly necessary (localStorage) | Until cleared |
pg-history-v1 | SQL you ran in the coding sandbox | Strictly necessary (localStorage) | Until cleared |
dl-account-v1, dl-session-v1 | Optional email session on this device (name, email hash, plan, provider). | Strictly necessary (localStorage) | Until you sign out or clear site data |
dl_oauth, dl_oauth_state | GitHub OAuth session and CSRF state. HttpOnly cookies set only after you start GitHub sign-in. | Strictly necessary (first-party cookies) | Session 7 days; state 10 minutes |
datalane-roadmap-* | Which roadmap skills you marked done on this device | Strictly necessary (localStorage) | Until you clear checks or site data |
datalane-cert-best-* | Best score on a practice cert in this browser | Strictly necessary (localStorage) | Until cleared |
datalane-consent | Your cookie-banner choice, so it does not reappear | Strictly necessary (localStorage) | Until cleared |
__gads, __gpi, IDE | Google AdSense ad delivery and frequency capping — set only if ads are enabled and you clicked Accept | Advertising (third-party cookies) | Up to 13 months |
Everything above the advertising row stays on this device if you chooseEssential only. Advertising scripts (Google AdSense, when a publisher ID is configured) load only after you click Accept. You can change or revoke your choice at any time with theManage cookies link in the footer, and control ads personalization atGoogle Ads Settingsoraboutads.info/choices.
Affiliate links
When you click an affiliate link, the destination site may set a cookie to attribute your purchase. This is handled entirely by the third party; we never see your personal or payment information. See ouraffiliate disclosure for details.
SQL coding
Queries run in your browser with SQLite (sql.js). Nothing you type is sent to our servers.
Security reports
If you find a vulnerability, email srinivasa8511@gmail.com or use/.well-known/security.txt. Do not file public issues that include exploit details.
Contact
For privacy questions, emailsrinivasa8511@gmail.com.