Privacy Policy

Browsing the site: nothing from you

You can read the public pages — home, course overview, pricing, poster previews, this page — without giving us anything at all. There is no signup, no account creation, and no contact form that stores what you type. The only input field anywhere on the site asks for a license access code, and a code is not personal information about you.

The license access cookie (the only cookie we set)

The course modules and the printable poster downloads are licensed content. To view them, you enter an access code that your institution gave you (the demo code BG-DEMO-2026 also works, for anyone evaluating the course). The code is checked on our server — never in your browser — and if it's valid we set a single cookie:

• Name: bga_access
• What it holds: a signed note that says which institution's course is unlocked (so the course can greet you with your institution's name) and when the session expires. It contains no name, no email address, no account number, no IP address, and no identifier that points to you personally.
• Why: purely to keep the licensed content unlocked as you move between modules, without asking for the code again on every page.
• How long: it expires on its own after 8 hours.
• Attributes: it is marked HttpOnly (page scripts can't read it), SameSite=Lax, and Secure when the site is served over HTTPS.

How to remove it: the site has no account system, and there is no "sign out" button — the only ways to end the session are to clear cookies for this site in your browser settings, wait out the 8 hours, or simply stop using the site. Clearing your browser cookies removes it immediately.

If you email us

Our contact path is a plain email link — there is no web form behind it. The site uses bankguard-academy-c68468aa@ctomail.io for licensing and enterprise enquiries (the pricing page's "license" and "custom quote" links open an email to that address). If you write to us, we see your email address, whatever you write, and anything you attach — and the replies we send back.

The ordinary plumbing every website has

The site is hosted on Vercel, a hosting platform. To deliver a page, its servers necessarily process standard technical request data such as your IP address and browser type, and may keep short-lived request logs for security and reliability. That is hosting plumbing, not tracking: we don't run analytics over it, we don't combine it with anything else, and we don't use it to identify or profile visitors. The pages also load the Inter web font from Google Fonts, so your browser makes a font request to Google's servers (as on many websites); that request goes to Google under Google's own privacy policy, not to us.

• The access cookie: for one thing only — keeping the licensed course unlocked for your session.
• Your email: to reply to you, answer questions about licensing, and (if you license the program) deliver your access code and materials.
• Order details from Stripe: to set up and support your institution's license — issuing the code, confirming what was purchased, and providing renewal or invoicing records.

We don't send marketing email to people who merely browsed the site, and we don't send unsolicited mail. If we ever email you, it's because you wrote to us or because you licensed the program, and you can tell us to stop at any time.

When an institution licenses the program, the payment is made through Stripe, a payment provider. The pricing buttons on this site send you to a Stripe-hosted checkout page (Stripe payment links), and the transaction is completed entirely on Stripe's platform. Stripe's handling of that information is governed by Stripe's privacy policy.

Card details never touch our servers. We don't see, receive, or store card or bank-account numbers, and this site never collects them. What we receive from Stripe is the ordinary order information a seller gets — the product purchased, the amount, the purchaser's email address, and the transaction record — and we use it only to provide and support the license.

• We don't sell, rent, or trade personal information. Ever.
• We don't run analytics or measurement tools on this site.
• We don't run advertising, and we don't use advertising or social-media pixels.
• We don't track you across other websites, and we don't build a profile of you.
• We don't create accounts, and we don't ask visitors to register.
• We don't collect your banking credentials, account numbers, or card numbers — on this site or by email.
• We don't use your email to spam you or to build a marketing list.

A note for your safety: we will never contact you asking for your password, a one-time code, or card details, and we will never ask you to move money. Neither will a legitimate bank. If someone does, that's a scam — no matter what the caller ID or email says.

BankGuard Academy is a general fraud-prevention education service for banking customers, not a children's product, and we don't knowingly collect information from children. There is nothing on this site that asks anyone — of any age — for personal details. If a child has emailed us and you'd like that message deleted, write to us and we'll remove it.

• Browsing data: none to keep. We don't run analytics, so there is no visitor history sitting anywhere.
• The access cookie: gone after 8 hours, or as soon as you clear your cookies.
• License codes: not visitor data at all — they're configuration. When an institution licenses the program, we store the institution name alongside its code in the site's server-side configuration, so the unlocked course can show "Welcome, [Institution]". That's an organisation name, not a person, and it holds no information about that institution's clients.
• Email: enquiries stay in our mailbox so we can respond and, if you license the program, support it. We keep them for as long as that's useful and then delete them. We don't promise a fixed retention period beyond "as long as needed to reply and to service a license".
• Order records: kept as long as we need them for accounting and licence records, and held by Stripe under its own policy.

If you want to know whether we hold anything about you, want an email thread deleted, or have any question about this policy, email bankguard-academy-c68468aa@ctomail.io. Because we don't run accounts or analytics, the honest answer is usually simple: the only thing we could hold is a message you sent us.

California residents: we don't sell or share personal information, and we don't collect it from visitors to this site — so there is nothing to opt out of.

If our practices change, we'll update this page and change the date at the top. The current version always lives at bankguardacademy.com/privacy.

For how we make this site, the course and the printable materials usable for everyone — including keyboard, screen-reader and magnification users — see our Accessibility Statement. For what a licence to the course includes — tiers, refunds and acceptable use — see our Terms of Service.

This page describes data practices only. It isn't legal advice, and the course we publish is fraud-prevention education — not financial, legal, or investment advice.