PRIVACY POLICY

Last updated 3 August 2026

shellDojo is a free blue-team training range operated by gary23w. This page describes exactly what it stores. It is short because the answer is mostly "nothing".

There are no accounts

shellDojo has no sign-up, no login, no password and no email field. It never asks who you are, and there is no user record to look you up in.

What stays in your browser

Your progress lives on your own device and is never sent to us. Two browser storage areas are used:

• sessionStorage holds the token describing the operation you are part-way through. It is cleared when you close the tab.
• localStorage holds your operator record — operations cleared, flags captured, experience, day streak — plus your settings: shell text size, guided or expert mode, and focus-audio choice and volume.

Clearing your browser storage for this site erases all of it permanently. We keep no copy, so we cannot restore it and cannot be asked to hand it over.

No cookies, no analytics, no advertising

shellDojo sets no cookies. It runs no analytics, no tracking pixels, no advertising and no third-party scripts of any kind. There is nothing to opt out of and no consent banner, because nothing is being collected to consent to.

What the server sees

The site is hosted on Vercel. Like any web host, Vercel processes standard request data — IP address, user agent, the URL requested, and a timestamp — in order to serve the page and to protect the service from abuse. We do not build profiles from this, do not combine it with anything else, and do not have a system that could link it to an individual.

The commands you type are evaluated statelessly: each request carries its own state and the server keeps nothing between requests. Nothing you type into the terminal is executed anywhere, and nothing is stored after the response is sent.

Who else your browser talks to

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) serves the monospace typeface. Your browser's request to Google reveals your IP address to them, as it would on any site using the service.
• GitHub and Buy Me a Coffee are linked from the footer. They are ordinary links: nothing is loaded from them unless you click.

Sharing your record

The share link is generated in your browser and encodes your numbers directly into the URL. Nothing is uploaded to create one and no record of it is kept. A share link only exists where you paste it, and it contains nothing beyond the figures shown on the card.

The Reddit app

shellDojo also runs as a Reddit app. Inside Reddit, and only there, one additional thing is stored: a per-post leaderboard, held in Reddit's own storage for the app. Each entry contains your Reddit username, your score, accuracy, elapsed time, step count, whether the run was in expert mode, and when it was recorded.

Your Reddit username is read from Reddit's API for the sole purpose of labelling your row on that leaderboard. Nothing else about your Reddit account is read or retained, and nothing from the leaderboard is sent back to this website. If you play a Reddit post while signed out, no entry is recorded at all.

Your use of Reddit itself is governed by Reddit's own privacy policy, not this one.

Children

shellDojo is not directed at children under 13 and collects no personal information from anyone, including children.

Your rights

Because there are no accounts and no personal data held on our side, there is no data of yours for us to export, correct or delete — clearing your browser storage does all three. For a Reddit leaderboard entry, contact us and it will be removed.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on the range's lobby.

Contact

Reach us through github.com/gary23w.

▶ BACK TO THE RANGE