Legal

TERMS & PRIVACY

Last updated: April 2026. These terms are open source under CC BY-SA 4.0.

THE SHORT VERSION

1. WHAT WE COLLECT

When you browse (no account)

Nothing. No cookies, no fingerprinting, no analytics. The skill tree is fully public.

When you register

When you use the platform

2. WHAT WE DON'T COLLECT

3. HOW WE USE YOUR DATA

We never: sell your data, share it with advertisers, use it for profiling, or give it to third parties without your explicit consent.

4. DATA STORAGE & AI PROCESSING

Data is stored on Cloudflare Workers KV (encrypted at rest, replicated at the edge). OTP codes are sent via Resend (transactional email only).

AI practice sessions run on Cloudflare Workers AI models. Your practice conversations are sent to the model to generate replies and your debrief, are not used to train models, and are never persisted — only the resulting scores and feedback summary are saved to your profile.

5. YOUR RIGHTS

6. VISIBILITY & PRIVACY DEFAULTS

Your profile is private by default. You must explicitly choose to:

You can change these at any time in your settings.

7. OPEN SOURCE

The 2nth.me platform code is open source. The skill definitions are open source. These terms are open source under CC BY-SA 4.0. You are free to fork, modify, and redistribute.

8. NO LOCK-IN

2nth.me is a neutral platform. It is not required to use any other 2nth product (2nth.ai, 2nth.io, etc.). There are optional bridges to the wider ecosystem, but they are always user-initiated and never forced.

9. COOKIES

We use exactly one cookie: 2nth_me_session — an httpOnly, secure, SameSite cookie that stores your authentication session. It contains no personal data. It expires after 7 days. That's it.

10. CHANGES

We'll notify registered users by email before making material changes to these terms. The full history is available in the open-source repository.

11. CONTACT

Questions about privacy or data: privacy@2nth.me

Data protection officer: Craig Leppan, craig@2nth.ai

POPIA & GDPR: This platform is designed to comply with the Protection of Personal Information Act (South Africa) and the General Data Protection Regulation (EU). We process data on the lawful basis of consent (registration) and legitimate interest (platform operation).