Privacy Policy
Last updated: April 14, 2026
DURA is built by Durwood Studios LLC. This policy explains what data we collect, where it lives, and what rights you have over it. We wrote it in plain language because you shouldn't need a law degree to understand how your data is handled.
Who we are
DURA is an open-source learning platform operated by Durwood Studios LLC. If you have questions about this policy, contact us at privacy@dura.dev.
What data is stored
DURA stores learning data on your device using your browser's IndexedDB. This includes:
- Learning progress — lessons completed, quiz scores, time spent
- Flashcard review history and spaced-repetition scheduling
- Study preferences — theme, font size, study mode, daily goal
- Goals — daily, weekly, phase, and career goals you set
- Skill assessment results and recommended learning path
- Behavioral analytics events — lesson starts, quiz completions, streak activity (see “Analytics” below)
- Sandbox code you write in the code editor (auto-saved locally)
By default, all of this stays on your device. Nothing is sent to a server unless you create an account and opt into cross-device sync.
What we do not collect
- No cookies
- No browser fingerprinting
- No third-party tracking scripts
- No advertising identifiers
- No personal information in analytics events
We do not sell data. We do not run behavioral advertising. We do not share data with third parties for marketing purposes.
Accounts and cross-device sync
Creating an account is optional. DURA works fully without one. If you choose to create an account:
- We collect your email address for authentication. If you sign in with a social provider (GitHub, Google), we receive the email associated with that account.
- Your learning data syncs to our database (hosted on Supabase) so you can access it from any device.
- You can disconnect at any time. Disconnecting stops sync but does not delete your local data.
- You can delete your account entirely from Settings. This removes all server-side data. Local data remains on your device until you clear it.
Analytics
DURA tracks behavioral events to understand which learning sequences are most effective. These events contain no personally identifiable information. Examples: “a lesson was started,” “a quiz was passed,” “a flashcard was reviewed.”
Events are stored locally in IndexedDB and batch-synced in the background when you're online (if you have an account). They never block the interface. If analytics fail, the app keeps working normally.
You can export all your analytics data from Settings. You can delete all your data from Settings.
Your rights
Regardless of where you live, you have the right to:
- Access your data — Settings → Export Data gives you a full JSON export of everything DURA knows about your learning.
- Delete your data — Settings → Clear All Data removes everything from your device. If you have an account, deleting your account removes all server-side data.
- Portability — Your exported data is standard JSON. Take it wherever you want.
- Withdraw consent — Sign out to stop syncing. Clear data to remove local storage. Delete your account to remove server storage.
If we ever experience a data breach affecting your information, we will notify affected users within 72 hours.
Users under 13
DURA does not knowingly collect personal information from anyone under the age of 13. Account creation requires age verification. If you are under 13, you can still use DURA without an account — all features work locally on your device without collecting any personal information.
If we learn that we have collected personal information from a user under 13, we will delete that data promptly. If you believe a user under 13 has created an account, please contact us at privacy@dura.dev.
Third-party services
DURA uses the following third-party services:
- Vercel — hosting and deployment. Privacy policy
- Supabase — authentication and database (only when signed in). Privacy policy
- Stripe — voluntary tip processing only. DURA does not store payment information. Privacy policy
No other third-party services receive your data.
Open source transparency
DURA is open source under the AGPLv3 license. You can read every line of code that handles your data at github.com/Durwood-Studios/Dura. This is the strongest privacy guarantee we can offer — you don't have to trust our words, you can verify our code.
Changes to this policy
If we make material changes to this policy, we will notify users via an in-app banner before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.