Privacy & fair play.

A place to practise with fictional data, track your progress and learn at your own pace.

What we store

We store your work email address, sign-in sessions, and challenge activity: start and submission times, submitted answers and elapsed time. We also record the agreement version you accept and when you accept it. We do not use advertising analytics.

Expressions of interest

The public website collects your name, email address, organisation and consent to be contacted about Copilot Challenges. These details are available only to platform administrators. We do not send an automatic marketing email. Contacts are removed after 180 days by scheduled cleanup, or earlier on request to hello@copilotchallenges.com. Consent is recorded with the submission time and notice version.

Who sees what

Your user value is the part of your verified work email before @. The organisation leaderboard displays your full verified work email address under User. Your organisation is identified by its dedicated portal URL. We verify your exact work-email domain at sign-in and on authenticated requests. Platform administrators manage client configuration and public contact registrations; administrator access alone does not grant access to organisation learning pages. You must read and accept the current privacy notice and user agreement before accessing learning content. Leaderboard participation is mandatory after acceptance. Only authenticated colleagues in your organisation can see your full verified work email address, rolling points, correct/submitted counts and counted time. Your submitted answers are not displayed on the leaderboard. The user value is fixed and cannot be changed in account settings. Platform administrators can review submissions and correct marking, with an audit record. Administrators with database access can see account records, progress and submitted answers.

Service providers and cookies

Microsoft Azure hosts the database and the application in the United Kingdom (UK South data servers). SendGrid processes your email to deliver sign-in links; email open and click tracking are disabled. Google reCAPTCHA receives browser and interaction signals during sign-in requests to help prevent automated abuse. Essential cookies maintain your session and protect requests. Google may use cookies under its own privacy policy.

AI assessment

Some writing tasks use OpenAI to assess your response against a defined rubric. We send the fictional task, marking criteria and your submitted answer, without your account email or user ID. Email-like text is redacted, but you must not submit personal, confidential or customer information. OpenAI processing may occur outside the United Kingdom, depending on the provider account configuration. Requests disable response storage and are not used for model training by default; provider abuse-monitoring logs may be retained for up to 30 days. AI marking can make mistakes; contact hello@copilotchallenges.com for an administrator review. A failed service call leaves a result pending rather than marking it incorrect.

Cookies and retention

We use cookies for sign-in and request protection. Google reCAPTCHA may also use cookies and browser signals for fraud prevention, under Google’s privacy policy. Sign-in cookies and server sessions persist for 366 days and are renewed on normal visits when less than a year remains. Inactivity alone does not sign you out. Signing out, deleting your profile or losing organisation access ends access. Clearing cookies or using a browser that removes them requires signing in again. Expired sign-in tokens, session records and rate-limit counters are removed by scheduled maintenance. Your profile, scores, submitted answers and agreement acceptance records remain until you delete your organisation profile. You can permanently remove your account and progress from account settings. Hosting logs and backups follow the operator’s configured retention policy.

Practise safely

Only use the fictional inputs provided here. Never submit company secrets, personal information or customer data. Use Microsoft Copilot under your organisation’s policies and review its output before using it at work.

A fair learning experience

Use Copilot to work through challenges yourself. Don’t share reference answers or automate submissions. This platform checks outputs; it cannot verify which tool produced them. Fixed-input challenges are practice exercises, not proctored assessments or a measure of employee performance.

Begin with short welcome exercises, then explore a varied personal feed. Question types rotate before repeating, and completed or skipped challenges are not offered again. New content is added over time. Each challenge or stage accepts one final submission. Fixed-answer exercises earn points for correctness. Rubric-based exercises earn partial credit against stated criteria; stage scores are averaged. New submissions earn up to 100 points for quality and up to a 20% speed bonus within five minutes. Previously submitted challenges retain their recorded scores. Skipping earns zero points and preserves earlier stage answers. The rolling seven-day leaderboard counts every graded challenge submitted within the last seven days, with total counted task time as a tie-break. There is no daily cap. The all-time leaderboard counts your full graded history. Older results remain in your history. Stage timers stop at submission and exclude background grading. After submission, review your result and select Next challenge to begin another task, or Finish for now to take a break. Returning after leaving shows a Resume button; recorded time is capped at 15 minutes per challenge, shared across stages and including time away. At the cap you can still submit or skip, without a speed bonus. Returning does not reset the cap.

Contact

For privacy questions, email hello@copilotchallenges.com.