Privacy Policy
This policy covers the REALM Framework website (realmframework.org) and the REALM Learning Platform (lms.realmframework.org). Both are operated by the same person. The data practices of each are different and are described separately below.
The main website is a public information website for the REALM Framework. It has no user accounts, no contact forms, and no checkout. You can read the content without creating a profile.
The site uses Vercel Analytics and Vercel Speed Insights to understand aggregated page usage and performance. These tools are designed without third-party cookies and are used for anonymous or aggregated statistics.
Microsoft Clarity may be used only after you accept optional analytics cookies in the consent banner. If you choose necessary-only usage, Clarity is not loaded by this website.
This website uses the fonts Rajdhani, Exo 2, and Share Tech Mono through the Next.js font system. The font files are fetched during the build process and served by this website. Visitors do not load the fonts directly from Google Fonts.
The main website (realmframework.org) is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit, Vercel's servers automatically process standard technical data such as IP address, requested page, browser type, and timestamp.
The legal basis for this processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the technically sound and secure operation of the website).
As Vercel is based in the United States, data may be transferred to the US. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
Vercel Analytics is used to measure page views and basic website usage. According to Vercel, it does not use cookies and stores aggregated analytics data rather than profiles that identify individual visitors.
Vercel Speed Insights is used to measure technical performance metrics such as Core Web Vitals, device type, browser, country, and route. This helps improve loading speed and reliability.
The legal basis for this processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in measuring and improving the public website).
This website uses a consent banner for optional analytics cookies. The banner lets you choose between optional analytics with Microsoft Clarity and necessary-only usage.
If you accept analytics, this website loads Microsoft Clarity, a user behavior analytics tool by Microsoft. Clarity can help understand clicks, scrolls, heatmaps, and page interactions so the website can be improved.
Clarity may set cookies or similar technologies only after consent. If you choose necessary-only usage, the Clarity script is not loaded by this website.
Your analytics consent decision is stored locally in your browser under the key realm_analytics_consent_v1. This is used only to remember whether the banner should be shown again.
The legal basis for Microsoft Clarity is your consent under Art. 6 para. 1 lit. a GDPR. You can change your choice from the analytics settings button on this privacy policy page or by clearing this site's local storage in your browser.
Microsoft's privacy statement is available at microsoft.com/privacy/privacystatement.
The REALM Learning Platform is a separate application that requires you to create an account. Because of this, it processes more personal data than the main website. There are no advertising cookies and no third-party analytics. The only third-party services involved are the infrastructure providers listed below.
The legal basis for processing your personal data on the learning platform is Art. 6 para. 1 lit. b GDPR, the processing is necessary to provide the service you signed up for.
When you create an account, we collect your email address and a securely hashed password. This data is stored using Supabase, Inc. (USA), which acts as our database and authentication provider. Supabase is certified under the EU-US Data Privacy Framework. Its privacy policy is available at supabase.com/privacy.
Your account data is retained for as long as your account exists. You may request deletion of your account at any time by contacting us at yggdrasilhq@gmail.com, after which your email address, progress data, and certificates are permanently deleted.
The platform tracks which lessons you have completed and stores your quiz scores. This is necessary to show your progress, resume where you left off, and determine when you have earned a certificate of completion.
When you complete all lessons in a course, a certificate is generated and stored in your account. The certificate contains your name (as entered during registration) and the course title. This data is stored only within our Supabase database and is visible only to you.
Progress data and certificates are tied to your account and are deleted when your account is deleted.
The learning platform includes an AI tutor called RealmGuide. When you send a message to RealmGuide, that message is transmitted to xAI (the company behind the Grok AI model) for processing. The response is returned to you in real time.
We do not store the content of your messages or the AI's responses in our database. However, xAI may process your messages according to their own privacy policy, available at x.ai/legal/privacy-policy. We recommend not sharing sensitive personal information in the AI tutor chat.
To prevent misuse, we store a count of how many messages each user sends per hour and per day. This counter contains no message content, only the number of requests and timestamps.
The legal basis for transmitting messages to xAI is Art. 6 para. 1 lit. b GDPR (necessary to provide the AI tutor feature you are using).
The learning platform uses a session token stored in your browser (via a cookie or browser local storage) to keep you logged in between visits. This is a strictly necessary technical mechanism, without it, the platform cannot function. No consent is required for strictly necessary cookies under Art. 5 para. 3 of the ePrivacy Directive.
No advertising cookies, tracking cookies, or analytics cookies of any kind are used on the learning platform.
The REALM Learning Platform (lms.realmframework.org) is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you use the platform, Vercel's servers automatically process standard log data including your IP address, the page requested, browser type, and timestamp.
The legal basis for this processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the technically sound and secure operation of the service).
As Vercel is based in the United States, data may be transferred to the US. Vercel is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection (Art. 45 GDPR). Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
If you are located in the European Union, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to applicable legal obligations. For learning platform users, this means full deletion of your account, progress records, and certificates.
Right to restriction (Art. 18 GDPR): You may request that we limit how we process your data.
Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): You may object at any time to the processing of your personal data based on legitimate interest.
To exercise any of these rights, contact: yggdrasilhq@gmail.com. We will respond within 30 days.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The authority responsible for this website is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
Luis Godoy Alvarez
Nuremberg, Germany
Last updated: May 2026