Just Launched

Privacy Policy

Last updated: August 2026

Information we collect

We collect the following categories of information:

  • Account information you provide directly: name, email, password, and (for hosts) business details.
  • Booking & transaction information: classes booked, dates, party size, host communications, and reviews you leave.
  • Payment information: handled directly by Stripe, our payment processor. We do not receive or store your full card number; see "Payment security" below.
  • Communications you send us, such as support requests or messages to hosts through the platform.
  • Usage & device data: pages visited, browser type, IP address, and similar log data collected automatically as you use the site.
  • Location data: the ZIP code you provide to find classes near you.
  • Social login data: if you sign in with Google or Facebook, we receive your public profile and email address from that provider.
  • Cookies: see "Cookies" below.
How we use it

We use your information to operate the platform, process payments, send booking confirmations and reminders, respond to support requests, prevent fraud and abuse, and improve our services. If you opt in, we may also send marketing emails. You can unsubscribe at any time.

Who we share it with, and how

We do not sell your personal data. We disclose it only as needed to operate the platform, in the following ways:

  • Class hosts: when you book a class, the host receives the booking details needed to run it (your name, contact info, and any info you submit for that booking), delivered automatically through the platform.
  • Stripe (payment processing & host payouts): your payment details are sent directly to Stripe via their secure, PCI-compliant integration. We never see or store your full card number.
  • Mailgun (email delivery): used to send transactional email, such as confirmations, receipts, and password resets, via a secure API integration.
  • Cloud infrastructure & storage providers: host and student-uploaded images and files are stored with access-controlled cloud object storage.
  • Sentry (error monitoring): technical error and performance data is sent automatically when something breaks, to help us fix it. This does not include your password or payment details.
  • Google / Facebook: only if you choose to sign in using one of these providers, for authentication purposes.
  • Law enforcement or regulators: only when required by law, such as in response to a valid subpoena or court order.
Payment security

All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. Card numbers are entered directly into Stripe's secure fields and never pass through SkillForage's servers.

Security practices

We use industry-standard measures to protect your information, including:

  • Encryption in transit via HTTPS/TLS on all pages, with HTTP Strict Transport Security (HSTS) enforced.
  • Passwords are never stored in plain text. They're hashed using Argon2, a modern, industry-recommended hashing algorithm.
  • Session and login cookies are marked secure and HTTP-only, so they can't be read by scripts or transmitted over an unencrypted connection.
  • Access to production systems and user data is restricted to authorized personnel who need it to do their jobs.
  • Automated error monitoring helps us detect and respond to issues quickly.

No method of transmission or storage is 100% secure, so while we work hard to protect your information, we can't guarantee absolute security.

Data retention

We retain your data for as long as your account is active or as needed to provide services. Deleting your account deactivates it immediately and logs you out everywhere, but we do not erase the underlying data: your bookings, reviews, and related records stay in our systems, since class hosts rely on that history for their own transaction, receipt, and tax records. If you'd like to discuss further removal of your personal information beyond deactivation, email [email protected].

Your choices

You can review and update your account information at any time from your dashboard. You can unsubscribe from marketing email using the link in any such email, and manage advertising/analytics cookies anytime via "Cookie Preferences" in the footer. To request a copy of your data or ask us to delete information beyond what's needed for active records, email [email protected].

Cookies

We use session cookies for authentication, a cookie to remember your cookie preference, and localStorage/sessionStorage for UI state. These are all strictly necessary and don't require consent. If we run advertising on the site or use Google Analytics, those set third-party advertising/analytics cookies, but only after you accept via the cookie banner; if you reject or haven't chosen yet, neither is set. You can change your choice anytime via "Cookie Preferences" in the footer.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you by email.

Contact

Privacy questions? Email [email protected].