← Back to CloudDrill

Privacy Policy

Last updated: June 2026

What we collect

When you create an account, we collect your email address and name via Clerk, our authentication provider. When you complete incident drills, we store your session results (score, completion time, hints used) to power your dashboard and progress tracking.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

How we use your data

  • To authenticate you and manage your session
  • To display your personal dashboard, scores, and progress
  • To generate assessments and track skill progression
  • To send transactional emails (account-related only)

Sandbox environments

Incident drill sessions run in isolated Docker containers. These containers are ephemeral — they are destroyed within 60 minutes of creation. No data you enter in the terminal is retained after the session ends.

Third-party services

We use Clerk for authentication and PostgreSQL (hosted on infrastructure we control) for data storage. Clerk's privacy policy applies to your authentication data.

Data retention

Your account data is retained for as long as your account is active. You may request deletion at any time by emailing us. Session assessment results are kept to maintain your historical record; if you want them removed, include that in your deletion request.

Contact

Questions about this policy? Email hello@clouddrill.io.