The Ascent keeps what it needs to run the course: your account, your climb and your tests. None of it is sold or used for adverts, and nothing on the site tracks you. From My profile you can download what it holds about you, or delete your account.
Who's responsible
The Agent's Ascent is run by , who decides what's kept and why. For any question about your data, to ask for something on this page, or to complain, write to . You'll hear back within 30 days. If you're not happy with the answer, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
What's kept, and for how long
The Ascent keeps these to run a course you asked to join and to keep it safe; that is its legal basis for holding them (legitimate interests). Open any one for what's in it, why, and who sees it. "Owners and super admins" are the people listed under Who sees what.
Your accountWhile you have an account
What
Your email address, when the account was made, when you last signed in, your role, how you joined and who let you in, the name you were invited under, whether the account is suspended or due to be deleted, and when your welcome email went. Supabase, which signs you in, also keeps a record of each device you're signed in on (its address and browser) while you stay signed in there.
Why
To sign you in and to run the site.
Who sees it
You, and the site's admins, super admins and owners on the Admin page.
How long
While you have an account.
Your profileWhile you have an account
What
Your name, photo, start date, goal, professor link, and whether you show your climb.
Why
So you appear on the mountain and your professor knows what you're aiming for.
Who sees it
Name, photo and start date: other signed-in climbers, unless you hide your climb. Goal and professor link: you, your professor, owners and super admins.
How long
While you have an account. You can change or remove any of it on My profile.
Your climbWhile you have an account
What
Each camp's status and notes, your check-ins, study sessions and hours, and your plan and its history.
Why
This is the course: it's how you and your professor see where you are.
Who sees it
Which camps you've passed, skipped or are working on: other signed-in climbers, unless you hide your climb. Everything: you, your professor, owners and super admins.
How long
While you have an account.
Your testsWhile you have an account
What
Each practice round and test: which questions you were given, when, how long it took, your score and the topics you missed. Tests are marked automatically by the database; if you think a mark is wrong, write to the address at the top of this page.
Why
To mark tests and apply the course's rules (for example, how often you can retake one).
Who sees it
You, your professor, owners and super admins.
How long
While you have an account.
Professor key, read link and plansKey and link until cancelled; plans while you have an account
What
The secret key and link you can make on My profile, and any plans your professor sends.
Why
So your AI professor can read your climb, and send plans for you to apply.
Who sees it
You, and whoever you give the key or link to. Plans sent: you and your professor.
How long
Key and link: until you cancel or replace them. Plans sent: while you have an account.
Your request to joinDeclined: 30 days. Approved: while you have an account
What
The email, name and answers you gave on Request access.
Why
So an admin can decide on it.
Who sees it
Admins, super admins and owners, on the Admin page. Their email only says a request is waiting, without your details.
How long
Declined, or approved but the account is gone: deleted 30 days after the decision. Approved: while you have an account. Waiting: until an admin decides.
Messages from a suspended account90 days after an admin deals with them
What
What you write on the Account suspended page.
Why
So admins can look at a suspension again.
Who sees it
Admins, super admins and owners, on the Admin page. Their email only says a message is waiting, without its text.
How long
Deleted 90 days after an admin has dealt with it.
The record of admin actionsWhile the Ascent runs; emails go once there's no account
What
Who invited, approved, declined, withdrew, suspended or restored whom, who changed whose role, and who asked to delete their account or changed their mind, with dates, the roles given and whether the person was told.
Why
So every decision about people can be checked later.
Who sees it
Admins, super admins and owners.
How long
As long as the Ascent runs. Once a person has no account (declined, invitation withdrawn, or deleted), their email is removed after 30 days, or straight away when they delete their account; the lines stay, under an anonymous id.
On your deviceUntil you sign out there
What
Your sign-in, a working copy of your climb, the climb you last looked at of anyone else's, and your light or dark theme, in the browser's storage. There are no cookies.
Why
To keep you signed in and make the pages quick.
Who sees it
Only that browser.
How long
Someone else's climb: until you go back to your own. Your climb: cleared when you sign out there, or the next time the site opens in that browser after you've been signed out, or when someone else signs in there. The theme stays until you change it.
Who sees what
You
Everything about you. Only you can change your profile and climb; admins can change your role or suspend your account.
Other climbers
Signed in only: your name, photo, start date and which camps you've passed, skipped or are working on. Hide your climb on My profile and they see nothing.
Your professor
Whatever your professor key or read link reads: your profile, climb, tests and course. Your professor's own service (Claude, ChatGPT, Gemini or another) handles that under your account with them.
Admins
Account details (name, photo, email, role, how you joined, last sign-in), requests to join and messages. Not your goal, notes, check-ins or scores.
Owners and super admins
Your whole profile, climb and tests, read-only, plus what admins see, to help climbers and look after the site.
Sign in to see the names of the owners and super admins.
If an admin invites you or approves your request, your welcome email names them, and a reply goes to their email address.
The Ascent is built and looked after with Claude, Anthropic's AI. While fixing a problem it may read records in the database. What it reads stays in that working session; it's never copied into the build log, documents or code.
Where it's kept
Supabase holds the database and signs you in, in . Its server functions (invitations, emails, your professor's link) run in whichever of its locations is nearest the request, which can be outside the UK. It keeps technical logs, such as the address a request came from, for a short time.
Brevo sends the site's emails: invitations, sign-in codes and notices. It keeps a log of each email (who it went to, the subject and when) for .
Cloudflare and GitHub host the pages while the site moves to its own address; after that, Cloudflare alone. Cloudflare answers from whichever of its locations is nearest you, which can be outside the UK. Like any web host, each logs the address of a visit for security. GitHub also stores the weekly backups (below).
Anthropic, through Claude, as above.
Each works under its own privacy terms. The site's fonts and code are served from the site itself, so a visit sends your address only to the site's host (Cloudflare or GitHub) and Supabase, never to font, script or analytics services.
Backups
Once a week the whole database is copied, encrypted, to private storage, so the Ascent can recover from a disaster. Each copy is deleted automatically after 12 weeks and is never used for anything else. A copy from 19 October 2026, made before this page existed, has been removed from that storage; GitHub may keep it, still encrypted, until its own clean-up. If a backup is ever restored, the restore steps delete again any account deleted since.
What you can do
Get a copy: Download my data on My profile gives you one file with what the Ascent holds about you. Test questions and answers are left out, so the tests stay fair, and so are Supabase's records of your signed-in devices: write to the address above for those.
Correct it: change your profile and climb yourself. For anything else, write to the address above.
Delete your account: on My profile (below is what happens).
Object, or ask for less to be done with your data: write to the address above.
Can't sign in (for example, a suspended account)? Write to the address above for any of these.
Deleting your account
14 days to change your mind
Day 0You ask, on My profile
You're taken off the mountain and signed out on every device. Your professor key and read link stop working.
Days 1–14Changed your mind?
Sign in again and choose Cancel deletion: everything comes back as it was.
Day 15Deleted
Your account and everything tied to it: profile, photo, climb, tests, keys, plans and messages. Your request to join goes too, and your email is removed from the record of admin actions; its lines about your account stay under an anonymous id, which is also kept with the date so a restored backup can't bring the account back. Backup copies roll off within 12 weeks.
The site always needs an owner: the only owner has to make someone else an owner before deleting their account.
Changes
When this page changes, the date at the top changes too.