Last updated date July 28, 2026
IntegrAuth operates the integrauth.com website, which provides the SERVICE.
This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, the IntegrAuth website.
If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at integrauth.com, unless otherwise defined in this Privacy Policy.
For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and postal address. The information that we collect will be used to contact or identify you.
Part of our Service is the IntegrAuth Academy at integrauth.com/academy. The lessons, the hands-on labs, the Flow Explorer and Challenge mode are free to use and need no account at all. You only need to sign in to take the final exam and to receive a certificate.
Signing in does not use a password. We send you to lab.integrauth.com — our sister site, described below — in the same browser tab, and it sends you straight back to the page you were on when you are done. There you give us your email address, we email you a six-digit single-use code, and you enter that code to sign in. If you sign in, we collect and store:
We use this information to run the Academy: to keep your progress in step across the devices you sign in from, to issue your certificate, and to answer the certificate verification requests described below. We do not sell it, and we do not send marketing email to the address you sign in with. Once your first certificate has been issued, the name on your account is fixed and can no longer be changed, so that the name printed on a certificate always matches our record of it.
Your Academy account is the same account used by the IntegrAuth Lab at lab.integrauth.com: both are operated by us and share a single user record in a single database, so your email address and other account details are common to the two. Signing in, however, is handled separately by each site. When you sign in to the Academy, we hand your browser over to lab.integrauth.com, where you enter your email address and one-time code as described above; once that succeeds you are returned to the Academy already signed in. Each site then sets its own session cookie, so being signed in on one does not automatically sign you in on the other — it takes that one extra click.
Because there is only one account, deleting it in either place deletes it in both. It is not possible to keep the account on one site and remove it from the other.
If you are not signed in, your Academy progress is stored only in your own browser, in local storage on your device. It is not sent to us, and clearing your browser's site data erases it. The interactive labs behave the same way: what you type into them stays in the page.
Once you sign in, your progress is also stored on our servers, so that it can follow you from one device to another. The two are merged rather than replaced: progress already saved in your browser is added to your account, and progress from your account is added back into that browser. Signing out leaves what is stored on our servers in place; deleting your account removes it.
We send email to the address you sign in with for one purpose: the single-use codes that sign you in, sent from the sign-in form at lab.integrauth.com. We use Resend, a third-party email delivery provider, to deliver those messages on our behalf, and your email address is shared with Resend for that delivery and for nothing else.
An Academy certificate is issued by us and recorded on our servers. It carries the name on your account, your final exam score, the issue date and a unique serial, and you download it as an image.
The serial is what makes a certificate checkable. Anyone who has it can enter it at integrauth.com/verify, without signing in, and is shown the name the certificate was issued to, the score and the issue date. That is what lets an employer confirm a certificate is genuine, but it also means that anyone you give the serial to can see those three details. Nothing else is returned by that lookup, and it never discloses your email address.
Alongside the image, you can also download your certificate as a digitally signed token (a JWT). It contains the same details the public lookup shows — the name on the certificate, the score, the issue date and the serial — and nothing more: it deliberately carries no email address and no account identifier. Anyone you forward it to can check its signature themselves against the public verification key we publish, without contacting us and without signing in.
You can delete your account yourself at any time, at lab.integrauth.com/account. Sign in there, choose "Delete account" and confirm. Deletion is permanent and cannot be undone by us. It removes your account and, with it, your name, your saved progress, your exam attempts and the certificates issued to you, across both integrauth.com and lab.integrauth.com. A deleted certificate can no longer be verified by its serial.
We keep the information described above for as long as your account exists. If you have any difficulty deleting your account, or would prefer that we did it for you, please contact us at akhil@integrauth.com and we will help.
We want to inform you that whenever you visit our Service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.
Our website uses these "cookies" to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.
If you sign in to the Academy, we also set a session cookie. That cookie is what keeps you signed in, and it is set for integrauth.com only, not its subdomains, so it is separate from the session cookie lab.integrauth.com sets for itself; it is removed when you sign out. The sign-in form itself lives at lab.integrauth.com, where it is protected by Cloudflare Turnstile, a bot check that runs in your browser — integrauth.com has no sign-in form of its own.
We use Cloudflare Web Analytics to count page views and see which sites link to us. It does not use cookies and does not follow you across other websites. We deliberately do not send it any custom events, so it records nothing about your learning progress, your exam attempts or your certificates.
We may employ third-party companies and individuals due to the following reasons:
We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.
The third parties we currently rely on for this website and the Academy are Cloudflare, which provides the infrastructure behind our sites, the database in which Academy accounts and progress are stored, and the analytics described above, and Resend, which delivers the sign-in code emails for the sign-in form at lab.integrauth.com.
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
Our Services do not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.
Our Privacy Policy was created with the help of the Privacy Policy Template.
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.