Reading progress
When you mark a module as studied, the site saves your reading progress in your browser’s local storage. It stays on that browser and device; it is not uploaded to a course account. You can clear it using the reset control on the course overview or your browser’s site-data settings. Progress may be unavailable in browsers that block storage.
Learner accounts
Accounts are run by Clerk (Clerk, Inc., USA), our sign-in provider; the sign-in pages live on accounts.uni.draht.dev and clerk.uni.draht.dev. An account stores your email address and, if you sign in with Google or GitHub, the name, email address and profile picture that provider shares. Clerk also keeps the technical data it needs to secure the account: sessions, devices, passkeys, IP addresses and sign-in times. This data may be processed in the USA under Clerk’s data processing terms.
Signing in sets session cookies (__session and __client_uat on this site, __client on the sign-in domain) that are strictly necessary to keep you signed in.
While you are signed in, we record your course activity against your account so we can see how far learners get and where a course loses them: when you first and last opened a course, which lessons you opened (with first and last time and how often), the last lesson you opened, and each starter-kit download with its kit version and time. This is recorded on our servers when a page or download is requested; no tracking script runs in your browser, and nothing is recorded while you are signed out. The records are stored on Amazon Web Services in the eu-central-1 (Frankfurt) region, and only the course team sees them, together with your account’s email address. We do this in our legitimate interest in improving the courses (Art. 6(1)(f) GDPR). Your “Mark as studied” progress stays in your browser, and the site does not see your gate results.
You can change or delete your account on the Account page, or ask for deletion at oskar@draht.dev. Deleting it removes your profile from Clerk and deletes your recorded course activity.
Paid courses and payments
When you buy a paid course, we keep an order record: your account’s id, the order number, the course, the price, the time and text version of the two declarations you ticked on the order page, Stripe’s identifiers for the checkout and the payment, the email address you gave at Stripe’s checkout, and when we sent the contract confirmation. The record is the contract, the proof of your declarations and an accounting record (Art. 6(1)(b) and (c) GDPR). We keep it for as long as German commercial and tax law require us to keep accounting records, up to ten years. Your account’s public metadata at Clerk holds the course as purchase, so the site knows to unlock it.
You pay on the checkout page of Stripe (Stripe Payments Europe, Limited, Dublin, Ireland), never on this site: card or bank details go to Stripe only. Stripe also processes the payment data as a controller in its own right, for example to prevent fraud and to meet its legal duties as a payment institution, and may transfer data to Stripe, Inc. in the USA. Its privacy policy is at stripe.com/privacy. Stripe sends the invoice or receipt by email.
Contract emails
The contract confirmation after a purchase and the acknowledgement of a withdrawal go out by email through Amazon Simple Email Service (Amazon Web Services EMEA SARL, Luxembourg), in the eu-central-1 (Frankfurt) region. AWS processes the address and the message on our behalf. Nothing else is sent through it: no newsletters, no marketing.
Withdrawals
If you withdraw with “Vertrag widerrufen”, we keep your name, the contract details and the email address you entered, the time your withdrawal arrived, and whether the acknowledgement went out. This is the proof of your withdrawal and of our acknowledgement (Art. 6(1)(c) GDPR, § 356a BGB). We keep it until claims from the contract are time-barred, usually three years after the end of the year, and longer where it is also an accounting record. To stop abuse of a form that needs no account, the site counts submissions per network address for an hour and per email address, stored only as a hash, for a day (Art. 6(1)(f) GDPR); the counters delete themselves.
Your rights
You can ask for access to your data, for correction, deletion or restriction of its processing, and for a copy in a portable format, and you can object to processing based on legitimate interests. Write to oskar@draht.dev. You can also complain to a data protection supervisory authority.
Hosting and external links
The site is configured for AWS hosting. Requests to a hosting provider necessarily include technical connection data such as an IP address, requested URL, and browser information. Fonts are served with the site. These pages do not include advertising trackers, analytics scripts, or embedded third-party videos.
Course readings link to external documentation, papers, and project sites. Those sites receive a request when you follow their links and handle your data under their own policies.
Read-aloud
Where a course page offers “Listen”, the paragraph you are about to hear is sent to this site, which has it spoken by the text-to-speech service ElevenLabs unless it was spoken before, and keeps the recording for everyone who listens to the same text. Listen is there when you are signed in or use an access link. Only the course's own text goes to ElevenLabs: nothing about you, your account or your device. To keep the cost in check, the site counts how many characters of new speech each account or access link asks for in a day, stored under a hash of the account's or link's id; the counters delete themselves after two days (Art. 6(1)(f) GDPR). The reading speed you choose stays in your browser's local storage.
Your work stays yours
The starter kit and evidence checkers run locally. This site has no flight-log upload or grading service. If you choose to publish your repository or send evidence to a reviewer, review the files first for personal information, device identifiers, and locations.
Agentic Engineering Week platform
Course access works through a personal access link, not a password. Opening it sets a session cookie (uni_session) that is strictly necessary for the site to recognise you; it is HttpOnly, cannot be read by page scripts, lasts 30 days, and is renewed for another 30 days while you keep using the site. A grant record behind the link stores your name, an optional email address, your access level (customer or trainer), dates (creation, cohort start, expiry, last use), and may contain an internal note from the course team about your access. Revoking or expiring the link ends access immediately.
Where the Oracle assistant is available, your question is sent to Claude, running on Amazon Bedrock, to generate the answer; requests go to the eu-central-1 (Frankfurt) endpoint and are processed only in AWS regions inside the EU (Frankfurt, Ireland, Paris, Stockholm, Milan or Spain). The question and answer text are never stored. The current conversation is kept only in your browser’s session storage and is gone once you close the tab. For each question, the platform stores a receipt linked to your access grant: time, model, token counts, model cost (list price), stop reason, and the episode the question came from; the course team can see these receipts per person. A per-grant daily question counter is kept for two days to enforce a fair-use limit. Course video clips are hosted on Amazon Web Services in the eu-central-1 (Frankfurt) region.