Last updated: September 12, 2026
This notice explains the personal information EduTrack collects and uses when you visit EduTrack.io, create or use an account, manage continuing-education records, purchase a membership, apply to or participate in the Ambassador Program, or contact us.
Information We Collect
Account and profile information
When you register, WordPress stores the account information needed to identify and authenticate you, such as your name, email address, username, and password hash. EduTrack does not store your plain-text password. Your CEU profile can include your name, reminder email, required credit total, license-renewal date, and reminder frequency.
Continuing-education information
When you use the CEU tools, we store the categories, credit requirements, course or certificate names, completion dates, credit values, original filenames, and related status information you enter. Certificate documents are stored in private server storage and are delivered only after an authenticated ownership check.
Membership and payment information
The paid membership route sends you to Stripe-hosted Checkout. Stripe collects and processes payment-card and billing information on its systems. EduTrack does not render or store card numbers or CVCs. EduTrack receives and stores the Stripe object identifiers and normalized transaction, amount, currency, membership, renewal, refund, dispute, failure, and cancellation status needed to provide and reconcile account access. The customer-portal link also opens a Stripe-hosted page.
Contact and email information
If you contact us, we store your name, email address, subject, message, status, submission time, and a privacy-minimized network hash used for abuse controls. Your message and our notification or acknowledgement email pass through the configured email-delivery provider.
Ambassador information
An Ambassador application can include your name, email address, password hash if a new account is created, promotion website or social-profile URLs, promotion plan, additional social channels, payout email, agreement acceptance, and application status. For approved Ambassadors, EduTrack records a referral identifier, attributed visits, eligible transactions, commission amounts, and payout-status records. External provider and reconciliation references remain outside WordPress. The WordPress application intentionally does not collect Social Security numbers, taxpayer identifiers, bank or check account credentials, or postal addresses. If separate tax or payout onboarding is required, it must occur through a separately approved secure process.
Technical and security information
The site and its hosting environment may process request details needed to deliver and protect the service, such as timestamps, requested paths, browser or device information, referral pages, authentication events, and privacy-minimized network identifiers. EduTrack uses these details for security, rate limiting, troubleshooting, referral attribution, and prevention of fraud or abuse; it does not restore the legacy analytics, advertising pixels, or behavioral-tracking scripts.
How We Use Information
We use personal information to:
- create, authenticate, support, and secure accounts;
- store and display your CEU profile, categories, progress, and certificate documents;
- send the account, password-reset, contact, transaction, and CEU reminder messages you request or that are necessary to operate the service;
- start Stripe Checkout or the customer portal and reconcile payment and membership status from signed Stripe events;
- review Ambassador applications, attribute eligible referrals, maintain commission records, and support external payout reconciliation;
- respond to questions, prevent abuse, investigate failures, maintain backups, and protect the service and its users.
Cookies and Similar Storage
WordPress uses cookies needed for authentication, account sessions, and site administration. If you follow an approved Ambassador link, EduTrack may set a signed, HttpOnly, SameSite referral cookie for up to 60 days so an eligible purchase can be attributed to that Ambassador. On an HTTPS production site the referral cookie is also marked Secure. Stripe may use its own necessary technologies when you visit its hosted Checkout or customer portal.
Service Providers and Disclosure
EduTrack does not sell personal information. We disclose or make information available only as needed to operate the service, including to:
- the hosting, database, private-file storage, backup, security, and infrastructure providers configured by the site operator;
- Stripe for hosted payment, subscription, refund, dispute, and customer-portal processing;
- the configured email provider for delivery of account, reminder, contact, and administrative messages;
- YouTube when an authenticated user loads the privacy-enhanced tutorial embed; the browser may then send YouTube or Google normal network and device request information;
- professional advisers, authorities, or other parties when reasonably necessary to comply with a valid legal obligation, protect users or the service, investigate misuse, or complete a business transfer subject to appropriate handling of the records.
Each third-party service operates under its own terms and privacy practices. The deployed site operator is responsible for selecting and configuring those providers.
Retention
EduTrack retains account, CEU, certificate, membership, contact, and Ambassador records while they are needed to provide the service and for legitimate support, security, reconciliation, and backup purposes. No universal automatic deletion period is built into this package. Some transaction, payout, dispute, fraud-prevention, or legal records may need to remain after an account or other information is deleted. Residual copies may also remain temporarily in protected backups until those backups expire under the site operator’s schedule.
Security and Limits
The rebuilt service uses WordPress authentication, purpose-specific nonces, validation and output escaping, owner-level authorization checks, rate limits, signed Stripe webhooks and referral cookies, and private certificate storage. Production deployment also requires HTTPS, protected credentials, restricted server permissions, monitoring, and encrypted tested backups. These safeguards reduce risk, but no website, transmission, or storage system can guarantee absolute security.
Your Choices and Requests
You can update core account and CEU profile details through the account tools and can change your CEU reminder frequency. You may request access to, correction of, or an export of your personal information, or ask for erasure, by using the Contact Us page. We may need to verify your identity before acting. Erasure is subject to information that must be retained for transaction reconciliation, security, fraud prevention, backup integrity, or legal obligations. Removing information needed to operate an account may require closing or limiting that account.
Children
EduTrack is designed for educators and is not directed to children under 13. We do not knowingly ask children under 13 to create an account. If you believe a child has provided personal information, please contact us so the site operator can investigate and take appropriate action.
Changes to This Notice
We may update this notice when the service, providers, or information practices change. The revised notice will be posted on this page with a new “Last updated” date.
Contact
For privacy questions or requests, use the Contact Us page.