Privacy

XQL Tutor is a free site for learning Cortex XQL. It collects as little as it can, and nothing at all unless you choose to sign in.

Without an account

Your learning progress and review schedule are stored only in your browser (local storage). They never leave your device. The site sets no cookies and loads nothing from third parties except Cloudflare's cookieless analytics beacon, which records aggregate page views.

If you sign in

Signing in is optional and passwordless. It exists only so correct answers can earn points on a leaderboard. When you sign in, the server stores:

• your email address, or the identifier your identity provider (GitHub, Google or Microsoft) supplies, used only to recognise you next time;
• your first name if the provider supplies one, which is never shown publicly;
• the handle you choose, which is the only thing shown on the leaderboard together with your points, card count and last-active date;
• one row per card you solve, with the points awarded;
• a session identifier in an HttpOnly cookie so you stay signed in for up to 30 days.

From an identity provider the site asks only for the minimum needed to read a verified email address and a first name. It does not post, read repositories, send email, or access anything else on your behalf, and it stores no provider access tokens.

Deleting your data

Open the Account page and choose "Delete account". That removes your account, identities, sessions and every score row immediately. Learning progress in your browser is yours to clear through your browser settings.

Hosting and security

The site runs on Cloudflare (Workers and D1). Transport is HTTPS only, with a strict content security policy. One-time codes and session identifiers are stored hashed. Short-lived rate-limit counters keyed by a hash of your network address protect the sign-in endpoints and are the only other data kept.

Contact

Questions or deletion requests: riskscope-consulting.com. The source code, including everything the server stores, is public at github.com/ciaran-finnegan/xsiam-xql-tutor.

Last updated 27 October 2026.