Privacy notice
Last updated 15 November 2026
Who is responsible
Blueprint Exercises is a trade name of MetaWorkx, a sole proprietorship (eenmanszaak) registered in the Netherlands, Chamber of Commerce (KvK) number 62661833. Registered address: Kladseweg 65A, 4664 RC Lepelstraat, the Netherlands. Email: support@blueprintexercises.com.
MetaWorkx is the controller of the personal data described here. For anything about your data, emailsupport@blueprintexercises.com.
What we collect and why
You can use the free preview without giving us any personal data. We only collect data when you create an account or buy a plan.
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email address | To sign you in and keep your account | Contract | Until you delete your account |
| Lesson progress (answers right, lesson finished, dates) | To show and save your progress on every device | Contract | Until you delete your account |
| Certificate name | To issue the certificate and its public check page | Contract | Until you delete your account |
| Plan and payment status (plan, start and end date, Paddle ids) | To give you the access you paid for | Contract, and our legal duty to keep records | 7 years, as Dutch tax law requires |
| Payment and billing details | Collected and processed by Paddle, not by us | Contract | See Paddle’s privacy notice |
| Server logs (IP address, browser) | To run the site and keep it secure | Legitimate interest | Kept briefly by our hosting providers |
| Visit statistics (page, referrer, country, device), without cookies or personal data | To see which pages help people and where they get stuck | Legitimate interest | Only as anonymous totals, kept by Plausible |
We do not sell your data, use it for advertising, or track you across other sites.
Who we share it with
- Paddle.com, our reseller and Merchant of Record. We share your payment and order details with Paddle so that it can process your purchase. Paddle is responsible for the payment data it collects, see Paddle’s privacy notice.
- Supabase, which stores accounts and progress and sends the sign-in emails, on our behalf.
- Cloudflare, which hosts the website, on our behalf.
- Plausible Analytics, an EU-based service that counts visits without cookies and without storing personal data.
- Our accountant and other professional advisers, where needed.
- Authorities, only when the law requires it.
Some of these providers may process data outside the European Economic Area. Where they do, they are bound by the European Commission’s standard contractual clauses or an adequacy decision.
Cookies and local storage
We do not use tracking or advertising cookies. Visit statistics come from Plausible, which uses no cookies at all. The site saves your progress, your chosen standard and, when you sign in, your session in your browser’s local storage. This is needed for the site to work, so it does not need your consent. The Paddle checkout may set its own cookies when you open it.
Your rights
Under the GDPR you have the right to:
- see the data we hold about you, and get a copy in a common format;
- have it corrected or deleted;
- restrict or object to how we use it;
- withdraw consent where we rely on it;
- complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
You can delete your account and all its data yourself on the account page. For anything else, email us. We answer within one month.
Security
Data travels over encrypted connections. Access to the database is limited by row level security, so each account can only read its own data, and only we can reach the admin tools.
Changes
We may update this notice. The date at the top shows the last change.