Privacy Policy
Effective September 29, 2026
Engine Walk collects as little as it can. There are no ads, no advertising trackers, and we never sell your information. This page explains exactly what we keep and why.
What we collect
- Using the free engine or browsing: nothing that identifies you. Your browser keeps your settings (for example, that you've unlocked the site) in its own local storage on your device.
- When you buy: Lemon Squeezy collects your name, email, billing country and payment details to process the payment. We receive your email, what you bought and the order status. We never see your card details.
- Your account: if you create an account or buy, your email and your password. Passwords are stored only as a salted, one-way hash (PBKDF2), so no one, including us, can read them.
- Promo codes: if you use a free-access code, we note which code your account used, so the owner can see who has redeemed it.
- Sign-in emails: when you ask for a sign-in code, we send it to your email address.
- Server logs: our host records basic technical information (such as IP address, browser type and time of request) to run and protect the site. Our own sign-in logs note only whether a purchase was found and whether an email was sent, never your address.
Why we use it
- to give you the access you paid for on every device you sign in on;
- to send sign-in codes and answer your emails;
- to handle billing questions and check that a purchase is still valid;
- to keep the site secure (for example, limiting sign-in attempts).
We don't use your email for marketing unless you choose to join a mailing list, and you can leave it at any time.
Who helps us run Engine Walk
These services process data for us, only as needed to provide Engine Walk:
- Cloudflare: hosts the site, its sign-in service and the account store.
- Lemon Squeezy: payments, receipts, taxes and billing, as merchant of record (their privacy policy).
- Resend: sends sign-in emails from hello@engine.college. Google (Gmail) holds the inbox where your replies and emails to us arrive.
- Google Fonts, jsDelivr and cdnjs: deliver the fonts and the 3D library the site loads. Like any website, they see your IP address when your browser downloads those files.
Cookies and local storage
Engine Walk doesn't use advertising or tracking cookies. It stores a few items in your browser's local storage to remember that you're signed in or unlocked. Clearing your browser data removes them. Lemon Squeezy's checkout may set its own cookies needed to complete the payment.
How long we keep it
Your account stays until you delete it. Purchase records are kept by Lemon Squeezy as tax law requires, even after you delete your account. Server logs are kept only briefly.
Your choices and rights
- Delete your account at any time from the account menu (the profile circle at the top), or by emailing us.
- Ask for a copy of what we hold about you, or ask us to correct it, by emailing enginewalk@gmail.com.
- Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you may have further rights. We honor them for everyone, wherever you are.
Children
Engine Walk isn't directed at children under 13, and we don't knowingly collect personal information from them. Students using Engine Walk through a teacher's Classroom License don't create accounts or give us any personal information. If you think a child has given us information, email us and we'll delete it.
Security
Everything travels over HTTPS. Passwords are hashed, sign-in attempts are rate-limited, and sessions are signed so they can't be forged. No system is perfectly secure, but we take care to protect what little we hold.
Changes
If we change this policy, we'll update the effective date above, and we'll say so on the site if a change is significant.