privacy policy

Last updated 5 November 2026

1. Who we are

This policy covers The Project member site, run by Josh Painter, San Antonio, Texas, USA. You can reach us by messaging us in The Project Discord server.

2. What we collect

You sign in with Discord. When you approve sign-in, Discord shares the following with us, and nothing else (we never see your Discord password or messages):

Data	Why we use it
Discord user ID, username and display name	To identify your account and greet you
Profile picture and banner	To show your profile in the portal
Email address	To identify your account in security records. We don't send marketing email or share it.
The date you joined our server and your roles in it	To confirm you're a member and decide which chapters you can open

We also record, linked to your Discord ID:

Your progress: which lessons, breakdowns and homework you've completed, and the date of each.
When you last signed in.
Blocked actions: if you right-click, use developer tools, or try to save, print or view the page source, we record what was attempted, when, and the IP address it came from. You'll see a warning on screen when this happens.

Your browser keeps a few things on your own device to make the site work: how far you've watched each video, the lesson you were last on, and announcements you've dismissed. These stay on your device and you can clear them by clearing site data in Chrome.

3. Cookies

We use two cookies, both needed for sign-in. We don't use advertising or tracking cookies.

theproject_session keeps you signed in for up to 7 days. It can't be read by page scripts.
theproject_oauth_state protects the sign-in step and expires after 10 minutes.

4. How we use your data

To sign you in and give you access that matches your Discord roles.
To track and show your progress, on your profile and to us, so we can support your learning.
To run, secure and improve the site, and to protect our lessons from being copied or shared.

We don't sell your data, use it for advertising, or share it with anyone except the services below that run the site.

5. Services that process data for us

Discord: sign-in and server roles.
Vercel: hosting the site, running sign-in, and storing lesson videos (Vercel Blob).
Upstash: the database that stores member records and progress.
Google Fonts: loads the site's fonts, which means your browser contacts Google's servers.
Payments are handled outside this site by the checkout you buy from, under its own privacy policy. We don't receive your card details.

These providers may process data in the United States or other countries.

6. How long we keep it

We keep your member record and progress while you're a member and for 12 months after you leave, so your progress is still there if you come back. After that it's deleted. Ask us and we'll delete it sooner.

7. Your choices and rights

See or delete your data: message us in The Project Discord server from the account you signed in with, and we'll send you a copy or delete it.
Remove our access: in Discord, go to User Settings → Authorized Apps and remove The Project. Signing out of the site also ends your session.
Depending on where you live, you may have further rights, such as correcting your data or objecting to how it's used. Contact us to use them.

8. Security

Sign-in sessions are signed and sent only over HTTPS, access checks happen on our server, lesson videos show a faint tag with your username, and lesson videos for chapters you can't open are never sent to your browser. No system is perfectly secure, so please keep your Discord account protected with a strong password and two-factor authentication.

9. Age

The site is for adults. It isn't intended for anyone under 18, and Discord itself requires users to be at least 13.

10. Changes

If we change this policy, we'll update the date at the top and post an announcement for significant changes.

11. Contact

Privacy questions or requests? Reach us by messaging us in The Project Discord server.

Terms of sale Sign in