Privacy

AnalystClass is run by Aljaž Colnar, as an individual rather than a company. That makes him the data controller for everything described here, and the person to write to about any of it, at privacy@analystclass.com.

The form stores your email address, which market you asked about if you signed up from a regional page, which page you signed up from, and the date and wording of the consent you gave. Nothing else. There is no name field and no tracking pixel in the emails.

The lawful basis is your consent, given by ticking the box. You confirm the address by opening a link, so an address nobody confirmed is never mailed and is deleted after a week. Every message carries an unsubscribe link, and unsubscribing takes one click and no explanation.

Accounts are opened with Google. Google tells this site your email address and name so the account can exist; your Google password is never seen by it.

Your profile, your progress, your saved notes and the internships you are tracking are stored in your own browser, not on a server. Clearing your browser data clears them, and they do not follow you to another device.

Nothing is counted until you say yes. A bar at the bottom of the page asks once, and if you decline nothing starts: no cookie is written, and no request is made to the analytics service at all. You can change your mind here, at any time.

If you agree, PostHog counts 9 things, and this is the whole list, rendered from the same list the code uses so it cannot fall out of step:

• a public page being viewed
• a signup being started
• a signup being completed
• onboarding being finished
• a practice set being finished
• an internship being saved to your list
• an outreach email being drafted
• a checkout being started
• a payment being completed

Alongside those, the analytics service records which page was opened and when it was closed, so a visit has a length. It stores one cookie, plus a few entries in your browser’s own storage, to recognise the same visit across pages.

Automatic click tracking is off, session recording is off, and no profile is created for anyone who is not signed in. None of what you write reaches the analytics service: not practice answers, not notes, not application details. Page addresses are stripped of anything after the path before they leave the browser. If you do have an account, the only thing tying these events to you is the random identifier your account already has: no email, no name.

Practice answers stay in your browser unless you press the button that asks for one to be marked. When you do, that one answer and the question it responds to are sent to Mistral to be read and commented on. Nothing else goes with it: not your name, not your email, not your other answers, not your notes or applications.

It happens in the EU. Mistral keeps the text for as long as it takes to mark it, plus a further period for their own abuse checks which they do not publish, and it is not used to train their models. The marking is never automatic. An answer you do not submit for marking is never sent, and you can use every practice tool without ever pressing it.

Modules have a tutor you can type questions into. It only runs when you write something and send it. When you do, what you typed goes to Mistral, along with the earlier messages in that same conversation and the text of the module you are reading, so that the reply follows what you were already discussing. Nothing else goes with it: not your name, not your email, not your practice answers, not your notes or applications.

The conversation is not stored anywhere. It lives in the browser tab while you have it open, and it is gone when you close it, which also means it cannot be recovered later. That is a deliberate trade rather than an oversight: keeping the thread would mean keeping a record of everything anyone had ever typed into it.

It happens in the EU, on the same terms as the marking above. Mistral keeps the text for as long as it takes to mark it, plus a further period for their own abuse checks which they do not publish, and it is not used to train their models. Because it is a conversation rather than a form, it is worth saying plainly: treat it as you would any message sent to a company you do not control, and do not type anything into it you would not want processed by one.

Five processors, each doing one job: Supabase stores the database, Vercel serves the site, Resend delivers the email, PostHog counts the visits you agreed to, and Mistral marks the answers you submit and replies when you ask a module a question. Nothing is sold, and nothing is shared for advertising.

PostHog is used on its European servers, so the analytics data stays in the EU rather than crossing to the United States because a default sent it there.

An unconfirmed email address is deleted after a week. A confirmed one is kept until you unsubscribe, after which the record is kept without the address being mailed again, so that a later form submission cannot quietly put you back on the list.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted, and you do not have to give a reason. You can also complain to your national data protection authority.

For the mailing list, the unsubscribe link at the bottom of any message is the fastest route. For anything else, write to privacy@analystclass.com.