Who we are
SalesforceTrails (salesforcetrails.com, the "Site") is an independent educational website operated by Rishabh Panwar, based in Hyderabad, India ("we", "us"). It is not affiliated with, endorsed by or sponsored by Salesforce, Inc. This policy explains what data the Site collects, why, and what choices you have. If you disagree with it, please do not use the Site.
What we collect and why
Usage analytics (Google Analytics 4)
We use Google Analytics 4 to understand which pages are read and how the practice hub is used. It sets the _ga family of cookies and collects page views, approximate location (derived from IP address), device and browser information, and interaction events such as quiz answers submitted and problems run. IP addresses are not stored by Google Analytics 4. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies are set only after you consent (see Consent below).
Advertising (Google AdSense)
We display advertisements served by Google AdSense. Google and its partners may set cookies and use identifiers to serve and measure ads, and — where you have consented, or outside regions where consent is required — to personalise them based on your visits to this and other sites. You can opt out of personalised advertising at Google Ads Settings and at aboutads.info. Google's use of advertising data is described at policies.google.com/technologies/ads.
Account (Sign in with Google)
Signing in is optional. If you sign in with Google we receive your Google account identifier, email address, display name and profile picture, and store them in a database hosted by Cloudflare (D1) so that your progress follows you across devices. We do not receive your Google password and we request no access to your Google data beyond these profile fields. A session cookie (sftrails_session) keeps you signed in for up to 30 days; it is HttpOnly, sent only over HTTPS and contains no data other than your account identifier, name, email and picture URL.
Learning progress
Quiz answers and solved practice problems are stored in your browser's localStorage so the Site can show what you have completed. If you are signed in, the same progress (which questions you answered correctly and which problems you solved, with timestamps) is also stored in our Cloudflare D1 database against your account identifier.
Code you run in the practice hub
Apex code you submit in the practice hub is sent to our servers, wrapped in a grading harness and executed against a Salesforce Developer Edition org that we control. Each run is logged with the problem, the outcome (passed, failed, compile error, runtime error), execution time, timestamp and — if you are signed in — your account identifier. The code itself is not retained after the run completes, except in server logs kept for abuse prevention for up to 30 days. Do not paste secrets, credentials, personal data or production data into the editor.
Server and security logs
Our hosting provider, Cloudflare, processes IP addresses and request metadata to serve the Site, apply rate limits and protect against abuse. We do not use these logs to identify individual visitors.
Contact
If you email us we keep the correspondence for as long as needed to respond and for our records.
Cookies and consent
Cookies set by the Site are listed in the Cookie policy. Visitors in the EEA, UK and Switzerland see a consent message (provided by Google) before any advertising or analytics cookie is set; you can change your choice at any time using the "Privacy and cookie settings" link in the footer of that message or by clearing your browser cookies.
Legal bases (EEA and UK visitors)
- Consent — advertising and analytics cookies.
- Performance of a contract — creating and maintaining your account and stored progress when you sign in.
- Legitimate interests — security logging, rate limiting, abuse prevention and keeping the practice hub available to everyone.
How long we keep data
- Account and progress data: until you ask us to delete it, or after 24 months of inactivity.
- Practice-run logs: 90 days.
- Analytics data: per Google Analytics' retention setting, currently 14 months.
- Data in your browser (localStorage, session cookie): until you clear it or sign out; the session cookie expires after 30 days.
Who we share data with
We do not sell personal data. We use these processors: Google (analytics, advertising, sign-in), Cloudflare (hosting, database, logs) and Salesforce, Inc. (the Developer Edition org that executes practice code). Each processes data under its own privacy policy. Data may be processed outside your country, including in the United States, under those providers' standard contractual safeguards.
Your rights
Depending on where you live you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent, and to complain to a supervisory authority. To exercise any of these, email us from the address you signed in with. To delete your account and all stored progress, email privacy@salesforcetrails.com with the subject "Delete my account"; we complete deletion within 30 days. Signing out and clearing your browser storage removes everything held on your device.
Children
The Site is intended for working professionals and students aged 16 and over. We do not knowingly collect personal data from children under 16; if you believe we have, contact us and we will delete it.
Changes to this policy
We may update this policy as the Site changes. The date at the top shows the current version; material changes are noted on the Site's "Latest updates" section.
Contact us
Questions about this policy: privacy@salesforcetrails.com.