Last updated: October 15, 2026
Who we are
CloudNinja (cloudninja.pro) is a free AWS certification study site run as a small independent business. For anything in this policy, contact us at [email protected]. This policy explains what we collect, why, how long we keep it, who helps us process it, and your rights under the EU General Data Protection Regulation (GDPR).
The short version
- You can use every practice exam, guide and cheat sheet without an account.
- Your exam progress, scores and settings stay in your own browser and never reach us.
- We only receive personal data when you choose to send it: emailing yourself your results, reporting a question, or contacting us.
- We don't sell your data, and we only email you news if you join our mailing list and confirm it.
Stored only in your browser
Exam progress, saved sessions, past scores, your theme choice and whether you dismissed the cookie banner are kept in your browser's local storage. This data never leaves your device. You can delete it at any time by clearing this site's data in your browser.
Data you send us
- Emailing your exam results. When you ask us to email your results, we receive your email address, the exam, your score, the time you took and your score per domain, and send you one email. We use your address only to send that email and don't keep it afterwards; we don't add you to any mailing list. To prevent abuse we keep a hash of your IP address for up to 30 days.
- Reporting a question. The report form sends us the exam and question, the category you picked, your message, the page address and, only if you enter it, your email address. Reports are stored in our database and copied into our private issue tracker on GitHub so we can fix the question. Your email address is never copied to GitHub; it stays in our database and is used only to reply to you.
- Contacting us. The contact form sends us your email address, your name if you give one, and your message. We store it in our database and forward it to our inbox so we can reply.
- Abuse protection. To stop spam, our forms record a one-way hash of your IP address and limit how many messages can be sent per hour. We don't store your IP address itself.
We keep reports and contact messages for as long as we need them to handle your request, and delete them when you ask us to.
Mailing list
If you tick the mailing-list box on one of our forms, or sign up in a mailing-list box, we send you a confirmation email first. You are only added once you confirm. The list brings AWS exam changes and retirements, new certifications, real discounts with an end date, and what's new on CloudNinja: at most once a week, usually monthly, and no course pitches.
We keep a record of your consent: your email address, when and where you signed up, the wording you agreed to, when you confirmed, and a hash of your IP address. Your address and subscription status are also stored with Resend, which sends the newsletter. Every email has a one-click unsubscribe link, and unsubscribing stops the emails straight away. Signups that are never confirmed are deleted after 30 days. If you ask us, we also delete your address from our records, keeping only what we need to show that you once consented.
Analytics
We use two analytics tools to see which pages and exams are useful and to find problems:
- Google Analytics 4 sets cookies and records pages viewed, approximate location, device and browser type, how you arrived, and clicks on course links. It doesn't give us your name or email address. Google keeps this data for the retention period set in our account, at most 14 months. You can block it with the Google Analytics opt-out add-on or your browser's cookie settings.
- Cloudflare Web Analytics counts page views without cookies and without identifying you.
Embedded videos and outside links
- YouTube. Videos are embedded through YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube only sets cookies once you play a video. See Google's Privacy Policy.
- Course links. Some links to Udemy courses are affiliate links. If you click one, Udemy and its affiliate partner Impact may set cookies on their own sites to credit the referral; their privacy policies apply there. Nothing about you is shared with them by us.
Why we're allowed to process your data
- The mailing list: your consent, which you can withdraw at any time by unsubscribing (Article 6(1)(a)).
- Sending your results, replying to reports and contact messages: you asked us to (GDPR Article 6(1)(b)).
- Fixing reported questions, abuse protection and site statistics: our legitimate interest in running a correct, secure and useful free service (Article 6(1)(f)).
Who processes data for us
- Cloudflare hosts the site, runs our forms and database, and provides Web Analytics.
- Resend sends our emails from its EU (Ireland) region and keeps the mailing-list contacts.
- GitHub hosts our private issue tracker, which receives question reports without email addresses.
- Google provides Google Analytics and YouTube.
Cloudflare, GitHub and Google are US companies. Where data leaves the EU, they rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it, or delete it;
- restrict or object to how we use it;
- send it to you in a machine-readable format.
Email [email protected] and we'll answer within one month. If you think we've handled your data wrongly, you can also complain to the data protection authority in the EU country where you live or work; see the list of EU data protection authorities.
Children
CloudNinja is meant for people studying for professional certifications. Don't send us personal data if you are under 13.
Changes
When we change how we handle data we update this page and the date at the top.
Contact
Privacy questions and requests: [email protected]. You can also reach us through our YouTube channel, @CloudNinja1984.