Skip to content

LEGAL

Privacy

Last updated 10 October 2026

This page explains, in plain language, what The Tower collects, why, and how you can have it deleted.

The Tower is responsible for the data described here. For anything about your data, write to contact@thetower.si.

You can browse The Tower without an account. If you sign in with Google, we receive and store your name, your email address and the ID of your Google account.

We ask Google only for basic identity (openid, email and profile). We do not store your Google profile picture, and we never get access to your contacts, calendar, Drive or any other Google data.

While you watch with an account, we save for each lecture:

  • your playback position and the length of the lecture;
  • whether and when you marked it complete.

This powers Resume, Continue Watching and your progress.

Like any web server, our hosting provider receives technical data such as your IP address and browser type whenever a page loads. We use it only to deliver the site and keep it secure, and we do not add it to your account. Sign-in attempts are rate-limited with short-lived counters to prevent abuse.

We use only strictly necessary cookies: a small session cookie, prefixed “tower”, that keeps you signed in for up to 30 days and is removed when you sign out. Your browser’s session storage may briefly remember where to send you back after signing in.

We use no advertising, analytics or tracking cookies, so there is no cookie banner.

Lectures play through YouTube’s embedded player (youtube-nocookie.com). When a video loads or plays, YouTube and Google may collect data, such as your IP address and viewing activity, under their own policies. We do not control that. See the Google Privacy Policy (https://policies.google.com/privacy) and the YouTube Terms of Service (https://www.youtube.com/t/terms).

We do not sell your data, and today we show no advertising and share no data for marketing. If that ever changes, we will say so here and update the date above. The only parties that process data for us are the services that run the site: Google (sign-in), Vercel (hosting), Neon (database) and Cloudflare (images).

Your account and your progress stay until you ask us to delete them. Sign-in sessions expire after 30 days.

Under Brazil’s data protection law (LGPD) you can ask us to confirm, access, correct or delete your data, or to give you a copy.

To delete your account and all your progress, email contact@thetower.si from the address you signed in with. We reply within 15 days.

The Tower is not directed at children, and we do not knowingly collect their data.

If this page changes in a meaningful way, we will update the date above.