Privacy Policy

This policy explains how devmodules ("we", "us") handles personal data when you visit this website, enroll as a learner, or contact us. It is written in plain language on purpose; if anything is unclear, ask us at info@devmodules.fuller.edu and we will answer in equally plain language.

1. Who we are

devmodules is an independent online school for JavaScript engineering, operated from Selangor, Malaysia. For the purposes of applicable data-protection law — including Malaysia's Personal Data Protection Act 2010 (PDPA) and, where it applies to visitors from the European Economic Area or United Kingdom, the GDPR / UK GDPR — devmodules is the data controller (in PDPA terms, the "data user") for the personal data described below.

2. What we collect, and why

Category	Examples	Why we collect it
Enrollment & account data	Name, email address, self-reported experience level, learning goals you type into the enrollment form.	To create and run your account, tailor Week 1 to your level, and send course-related email. Legal basis (GDPR): performance of a contract; (PDPA): necessary for the purposes you supplied it for.
Coursework	Exercise submissions, capstone repositories you share, review comments exchanged with mentors.	To grade your work, provide reviews, and show you your own progress. Your code remains yours — see our Terms of Service, section 5.
Correspondence	Emails you send to our addresses, messages via the contact form.	To answer you, and to keep a record of what was agreed. Legal basis: legitimate interest in running a responsive school.
Technical logs	IP address, browser type, pages requested, timestamps — standard web-server logs.	Security, abuse prevention, and keeping the site up. Logs are aggregate-analyzed; we do not build individual browsing profiles. Legal basis: legitimate interest.

We do not collect payment card details on this website. We do not buy data about you from third parties, and we do not sell or rent personal data to anyone. A note on ad networks: there are none here — this site carries no advertising and no third-party ad trackers.

3. Third parties involved in serving this site

Loading any modern web page involves other companies' servers, and honesty requires naming ours:

• Google Fonts. Our typefaces (Fraunces, Inter, JetBrains Mono) load from Google's font servers. When your browser fetches them, Google receives your IP address and standard request headers under its own privacy terms. If you self-host this site, the fonts can be bundled locally instead.
• Image CDN. Workshop covers, article images, and page banners are served from a content-delivery network (Amazon CloudFront). Fetching those images likewise discloses your IP address to that CDN.
• Email provider. Mail to and from our @devmodules.fuller.edu address passes through our email hosting provider, as all email does.

None of these parties is permitted to use your data for their own marketing on our behalf, and we deliberately run no third-party analytics scripts, social-media pixels, or embedded trackers.

4. Cookies

This website itself sets no advertising or analytics cookies. If you enroll, we set strictly necessary cookies for signing you in and keeping your session alive — the kind the law does not require a consent banner for, which is why you don't see one. Blocking cookies in your browser will simply mean you cannot stay signed in.

5. How long we keep things

• Account and coursework data — for as long as your account exists, and for up to 90 days after you delete it (so an accidental deletion can be undone), after which it is removed from active systems.
• Correspondence — up to 24 months after the thread closes, in case the matter comes back.
• Server logs — rotated and deleted within 12 months.

Backups are retained on a rolling schedule and expire automatically; deleted data disappears from backups as those cycles complete.

6. Security

Traffic to this site is encrypted with TLS. Internally, access to personal data is limited to the people who need it to run the school, protected by strong authentication. No internet service can honestly promise perfect security; if a breach ever affects your data, we will notify you and the relevant authorities as the law requires.

7. Your rights

Wherever you live, we extend the same baseline: you can ask what we hold about you, ask us to correct it, ask us to delete it, or object to a use of it, by emailing info@devmodules.fuller.edu. We respond within 30 days.

• Malaysia (PDPA 2010): you have rights of access and correction, the right to withdraw consent, and the right to prevent processing likely to cause damage or distress. Complaints may be directed to the Personal Data Protection Commissioner (JPDP).
• EEA / UK (GDPR / UK GDPR): you additionally have rights to erasure, restriction, data portability, and to lodge a complaint with your local supervisory authority.

Every course email we send includes a working unsubscribe link; using it stops everything except essential account messages.

8. International transfers

We operate from Malaysia and use infrastructure providers whose servers may be located elsewhere (see section 3). Where data leaves its region of origin, we rely on the providers' standard contractual safeguards for such transfers.

9. Children

devmodules is intended for learners aged 16 and over. We do not knowingly collect personal data from children under 13; if you believe a child has enrolled, contact us and we will delete the account.

10. Changes to this policy

When this policy changes, the version number and effective date at the top change with it, and enrolled learners receive an email summary of what moved. We do not retroactively grant ourselves new uses of old data.

11. Contact

Questions and requests about this policy: info@devmodules.fuller.edu or the contact page.

This document describes our practices; it is provided for transparency and is not legal advice to you.