Your privacy choices

Necessary cookies and storage support sign-in and learning. Optional Vercel analytics and campaign measurement stay off unless you accept. Rejecting won't affect courses or checkout.

Global Privacy Control is on. Optional analytics stays off.

Cookie and storage details

RouteSwitchUBuy all courses · $299
CoursesField NotesToolsAccountSupport

Privacy policy

Last updated: 2026-10-12

The short version

RouteSwitchU, a Colorado sole proprietorship in the United States, runs this site. We collect what we need to run the waitlist, sell the courses, run your account, answer your email, and review course reports. We don't sell personal information, we don't use it for targeted advertising, and your full card number never reaches us.

If you saved a spot on our waitlist and confirmed your email address, we send you two emails about your spot: one telling you we're open for purchases, and one reminder before your spot expires on October 8, 2026. If you signed up for new-course news and offers, we send those at most 2 a month. You can unsubscribe from all of it with one click. The address on a course account is separate. We use it to sign you in, for your purchase, and for support, and we never add it to our email list. You can export or close your account on the account page, and you can ask us anything about your information at privacy@routeswitchu.com.

When Study Workspace is available to your account, we store your study calendar, confidence ratings, personal repair notes, assessment responses and results, and flashcard review records to provide those features across devices. These records are included in account export and removed through account closure. Backup copies age out under the retention schedule below.

Networks 101 command-mode, DNS resolver, PoE, channel-overlap practice and the evidence-sorter pilot, dependency exercises, routing practice, and IPv4 and IPv6 address exercises send your answers for checking when you choose Save result. We store the score, exercise version and dates in your account, not the answers or your first-attempt count. Written DNS predictions and channel explanations are not sent or stored. Saved results are included in account export and removed through account closure. IPv4 and IPv6 draft answers stay in browser storage on this device across refreshes. Clear answers removes that case from the local draft; browser site-data settings remove all local drafts. Draft answers for these IP exercises are sent only when you choose Save result. Unfinished answers in the other exercises listed in this paragraph remain only in the open page and clear on refresh.

The Networks 101 two-router, IPv4, IPv6, switch-access, switch-key, switch-console, switch-startup, capstone IPv4, capstone access/IPv6, capstone sweep, integrated capstone, capstone build, capstone management, capstone checkpoint, and capstone transfer configuration and repair labs send selected commands and model actions when you run a check or use a task control. We keep the current attempt's accepted commands, model events, submitted IID answers, diagnosis choices, help use, and checks in your account so you can reload it. Check and save result records a completed result. Reset clears the current commands, model events, answers, and checks but keeps recorded help use and the last saved result. Rejected commands are not kept in the account. Account export includes this lab data, and account closure removes it. The account and backup retention rules below apply to this data. The switch-access model uses a fixed example account with no password input. It does not collect device credentials or open a real SSH session. The switch-key model stores example key state and model actions. It does not collect or create cryptographic keys. The switch-console model stores fixed example access settings and model actions. It does not collect passwords or change real device settings. The switch-startup model stores fixed example running and startup settings through model actions. Saving those startup settings does not save a course result or change a real device.

Who we are

RouteSwitchU is a Colorado sole proprietorship. Our mailing address is 1580 N Logan St Ste 660 PMB 263873, Denver, Colorado 80203-1994, United States, and our privacy contact is privacy@routeswitchu.com. Under the GDPR and the UK GDPR, we are the controller of the information this policy describes. Brent Leekley owns and operates RouteSwitchU, is responsible for privacy here, and reads that mailbox.

What we collect and why

You don't have to give us anything to read the free pages. To sign up for course news, we need your email address. To buy, you give Stripe or Link your email address and payment details, and without them we can't sell to you.

If you sign up for course news, or saved a spot

We collect:

  • your email address;
  • your country, which our host looks up from your IP address when you sign up (we keep the country, not the IP address);
  • how you found us, if we know: the website that sent you and any campaign tags in the link you arrived on (see "How you found us" below);
  • a record of your signup: when you signed up, the exact wording you saw, and your country;
  • if you tick the box for news and offers, a separate record of that consent: when you gave it, the exact wording, your country, and, later, when you withdrew it.

We use it to:

  • hold your saved spot until October 8, 2026, at 9:00 AM Mountain Time: we send you its Buy link when you ask for it on the saved-spot page, we move it to another email address if you ask support@routeswitchu.com to, and when you buy with its link, we match the purchase to your spot so you get the $249 price we held for you;
  • send you an email to confirm your address, then, if you confirm it, the two emails about your spot that saving it asked for: one telling you we're open for purchases, and one reminder before your spot expires on October 8, 2026;
  • if you ticked the box, send new-course news and offers, at most 2 a month;
  • see which of our posts and links bring people to our signups.

Under the GDPR and UK GDPR, holding your spot and sending the confirmation email and the two emails about it are steps you asked us to take before a possible purchase. News and offers rely on your consent, which you give only by ticking the box. Counting where signups come from relies on your separate optional-analytics consent (see "Optional analytics").

You can stop our emails at any time. The one-click unsubscribe link in any of our list emails stops all of them right away and withdraws your consent to news and offers. You can also write to privacy@routeswitchu.com. Unsubscribing doesn't cancel your saved spot, which still holds until October 8, 2026, at 9:00 AM Mountain Time, unless you also ask us to delete your information. Withdrawing your consent doesn't make the emails we sent before unlawful.

If you use the Study Workspace

When you save a workspace, we store your objective ratings, personal notes, resource links, study tasks, weekly budget, optional target date, and save timestamps with your account in Neon. We use them to provide the study workspace across devices. Your account export includes them, and account closure removes them. Draft changes stay in the open page until you save; they are not saved in browser storage. Do not include credentials or confidential work information.

If you create an account or buy

When you buy, you type your email address and payment details into Stripe's checkout page, not ours. Your RouteSwitchU account is created from the email address you use there. If you open a free account instead, you type your email address into our site.

  • Account information: your email address and whether it has been confirmed, an optional display name, account timestamps, and account status.
  • Authentication information: one-way password and recovery-code verifiers, hashed session identifiers, short-lived signed access claims, and hashed one-time sign-in links while they are unused. We don't store your plaintext password, recovery code, or sign-in link.
  • Purchase information: from Stripe or Link we receive your email address, your billing country, the order reference, the price, tax, and total, the payment status, and the time of purchase. Our Stripe dashboard also shows details such as your name, billing address, and the type and last four digits of your card, but we don't copy those into our own systems. We also record the version of the Terms of Sale you accepted, the offer you bought, any refund request and its outcome, and how you found us if we know.
  • Course information: which courses you can open, your course progress, and transitional protected-download records while that legacy delivery path is retired.

You can sign in with a one-time link we email you or with your password. Receiving that link at your address is what proves the address is yours, so keep access to the mailbox on your account. If you lose both the mailbox and the password, the recovery code you saved when you set up the account is the way back in.

We use this information to take payment, give you access, sync your progress between devices, send your welcome email and account notices, handle refunds, keep tax and accounting records, check that we're allowed to sell where you are, prevent fraud and abuse, and recover from service failures. The legal bases are contract (to sell you the courses and run your account), legal obligation (tax, accounting, consumer law, and sanctions rules), and our legitimate interests in preventing fraud and abuse and in handling payment disputes.

The address on your account is for signing in, your purchase, and support. We don't add it to our email list. You join the list only by signing up for it yourself.

Refund requests

When you use the "Withdraw from contract here" button or write to refunds@routeswitchu.com, we keep your name, the email addresses you give us, the order the request is about, the statement you sent, and the date and time we received it. We need this to refund you and to show we did it on time. The legal bases are legal obligation (consumer law) and contract.

Security information

We keep account security events, bounded abuse-attempt records, timestamps, and keyed hashes derived from network addresses and account identifiers. They help us prevent misuse without keeping a raw IP address in our database. The legal basis is our legitimate interest in keeping the service and your account secure.

Email you send us

We keep whatever you choose to include when you write to us, and we use it to answer you. The legal basis is our legitimate interest in answering you, or contract when your email is about a purchase.

Course reports

When you report a correction, a broken link, or a problem with a course tool, we email your description, the course page, the report category, any optional link you provide, and a request reference to our corrections inbox. We use your signed-in account and a keyed network-address hash to limit misuse, but we do not add your account ID, name, or email address to the report. Query strings and fragments are removed from the optional link. Do not include credentials or private network or customer data in your description. We use reports to maintain the courses, based on our legitimate interest in correcting errors and maintaining the service.

Older subscriber records

Preserved subscriber records from an older signup form can include an email address, a consent choice, a signup source, and a signup time. That form is closed, these records are separate from the waitlist and from course accounts, and we never email them.

Optional analytics

Optional analytics is off until you choose "Accept optional." Rejecting it does not affect accounts, checkout, course access, labs, or progress. We apply this choice everywhere, regardless of your country. The legal basis for this optional measurement is your consent.

If you accept, Vercel Web Analytics counts visits on public pages and a few actions, such as signing up for course news or starting checkout. It uses request information such as browser and device type, referring website, and approximate location derived from your IP address. Vercel describes its visitor identifier as a request-derived hash discarded after 24 hours. It does not use analytics cookies. We remove query strings and fragments from the page addresses we send and send no custom event properties. We do not load analytics on account, sign-in, purchase-confirmation, withdrawal, waitlist-management, or lesson-reader pages.

Choose "Privacy settings" at the bottom of any page to accept or reject optional analytics. Rejecting stops future measurement; it does not undo processing that happened before you withdrew consent. Global Privacy Control keeps optional analytics off, including when an earlier saved choice allowed it. Without JavaScript or readable consent storage, optional analytics stays off.

We remember your choice on this browser for 180 days, then ask again. Clearing site data removes the choice. Each browser or device has its own choice; we do not associate it with your account.

How you found us

Only if you accept optional analytics, our signup and checkout forms send campaign tags and the referring website name with your submission. We save those with the signup or order to understand which campaigns work. We do not store campaign attribution in your browser. Rejecting optional analytics stops future collection by these forms; contact us to exercise your rights over information already saved. Discount codes and saved-spot links still work because they are used to provide the offer you request.

Optional YouTube videos

Some Field Notes include a YouTube video. Its thumbnail is hosted on our site. We connect to YouTube only when you choose “Load YouTube player,” using YouTube's privacy-enhanced embed domain. YouTube may then process your IP address, browser information, and playback activity under Google's privacy policy. This choice is separate from our optional analytics and is not saved. “Remove player” removes the embedded player from the page; it does not delete information already sent to YouTube. You can also watch on YouTube directly or read the article without loading the video.

Browser storage and cookies

Necessary first-party cookies secure sign-in and course access. They are Secure, HttpOnly cookies, scoped to this site. They do not require optional analytics consent. Payment providers manage storage on their own hosted checkout pages under their own notices.

__Host-rsu_session
Signed-in session. Default 30 days, with a configured maximum of 90 days; cleared on sign-out.
__Host-rsu_access
Course-access authorization, lasting up to 15 minutes.
__Host-rsu_link
Binds a requested sign-in link to this browser for up to 10 minutes.
__Host-rsu_claim
Connects a signed-out purchase to the browser that started it, for up to 24 hours.
rsu-privacy in local storage
Your optional-analytics choice, notice version, and choice time, valid for 180 days. Contains no account identifier.
Learning and preference storage
Reading preferences, progress, resume position, completed labs, and editable drafts stay in local storage until you reset them or clear site data. Temporary navigation positions in session storage last for the tab's session. These network configuration labs also keep your unsent command in session storage for the tab's session and clear that draft after a successful command. These support the learning features you use and are not used for advertising.

Lab source is not uploaded by default. If you are signed in, supported lesson-completion progress is synced to your account. Closing an account does not erase browser-local copies. You can remove those through your browser's site-data settings; doing so also removes saved preferences, drafts, and your privacy choice. We do not use advertising cookies.

Who we share it with

We don't sell or rent personal information, and we don't share it for targeted advertising. We share it only with the companies that run parts of RouteSwitchU for us, and with Stripe and Link to take payments.

Each of the companies below uses your information only to provide its service to us, under data protection terms with us:

  • Vercel hosts the website and server code, keeps request logs, and runs Web Analytics.
  • Neon hosts our database.
  • Resend sends our email: sign-in links, account notices, the welcome email, refund confirmations, waitlist emails, and course reports to our corrections inbox. It processes the message content, destination address, and delivery status.
  • Bluehost hosts our mailboxes, so it stores the email you send us.
  • Notion hosts our support tickets, so it stores your address, your subject line, an excerpt of your message, and our reply drafts.

Course software is served from RouteSwitchU's own site rather than run from a third-party content-delivery network.

Stripe and Link also use payment information for their own purposes, such as fraud prevention and legal compliance, under their own privacy policies:

  • Stripe processes payments for the orders we sell directly, and handles your payment details under its own privacy policy at stripe.com/privacy. Your full card number never reaches RouteSwitchU.
  • If your order is sold through Link, Sold through Link, LLC ("Link") is the merchant of record. It sells you access, charges you, handles the tax, and shares your order details with us so we can give you access. Link handles your information for that sale under its own privacy policy at link.com/privacy.

We may also disclose information when the law requires it, when you ask us to, or when needed to protect rights, safety, and our legal obligations.

Where your information is stored

RouteSwitchU is based in the United States, and we and our providers store your information in the United States. If you live outside the US, your information goes to the US when you give it to us. US privacy law is different from the law where you live and may protect you less. Our providers handle it under data protection terms with us.

How long we keep it

  • Your course news signup: one record, kept while you are subscribed. It holds your email address, when you signed up, the exact wording you saw, your country, and, if you ticked the box for news and offers, when you gave that consent and the wording you gave it to.
  • Your saved spot: held on that same record. The spot itself expires October 8, 2026.
  • After you unsubscribe: we keep the record and add the date you left. We keep it, rather than deleting it, so we never email you again by mistake and so we can show what you asked for and when.
  • If you ask us to delete it: write to privacy@routeswitchu.com and we delete the record within 30 days. If your saved spot is still open, it ends with the record.
  • Accounts: an account without a purchase may be deleted after 30 days without a successful login, unless it has a saved Study Workspace. For accounts with a saved workspace, the inactivity period is 24 months after the most recent successful sign-in or workspace save. Accounts with purchases or course entitlements are excluded from this inactivity cleanup. When an account is closed, its workspace, progress, and profile data are removed, including the email address on it.
  • Sessions and abuse records: expired sessions are removed daily, and routine abuse records are removed after 24 hours.
  • Security events: normally kept for 365 days, unless needed for an active incident.
  • Sign-in and confirmation links: an unused sign-in link stops working after ten minutes and only works in the browser that asked for it. A confirmation link lasts 24 hours, opens on any device, and never signs anyone in. The records of both are deleted within a day.
  • Orders, refund requests, and the minimum purchase reference: kept while support, refund, accounting, tax, or other legal obligations apply.
  • Email and course reports you send us: kept for 2 years after the support ticket for it is closed.
  • Older subscriber records: deleted on a verified request, except for a minimal suppression record when needed to honor an opt-out.
  • Your browser: closing an account doesn't clear drafts, completion markers, or preferences stored by this site in your browser. You control that copy through your browser's site-data settings.
  • Backups: encrypted production backups are designed to keep 30 daily recovery points, so a deletion can remain in a rotating backup until that recovery point expires. If we restore a backup, we reapply later deletion requests before normal service resumes.

Incident evidence may be isolated and kept longer when necessary to investigate and meet legal obligations. We limit it to what the investigation requires.

Your rights

Wherever you live, you can ask us to:

  • show you the information we have about you and give you a copy;
  • correct it;
  • delete it;
  • give you the information you gave us in a format you can take elsewhere (the export on the account page does this for account data);
  • stop using it while we look into a complaint about it.

You can withdraw your consent at any time, for example by unsubscribing. Withdrawing it doesn't affect what we did before.

Your right to object. You can object at any time to any use of your information that relies on our legitimate interests, such as preventing fraud and abuse. We'll stop unless we have compelling grounds the law recognizes, or need the information for a legal claim.

We don't sell personal information, use it for targeted advertising, or use it to profile you in ways that have legal or similarly significant effects. The one automated decision we make is at checkout, which refuses orders from places we don't sell to, based on the country you connect from and your billing country. If you think it got your location wrong, email support@routeswitchu.com.

These rights come from several laws. We give them to everyone, whether or not a particular law applies to you or to a business our size.

  • EU and UK: the GDPR and the UK GDPR.
  • Colorado: the Colorado Privacy Act gives you the rights to access, correct, delete, and get a portable copy of your data, and to opt out of targeted advertising, sales of personal data, and profiling that produces legal or similarly significant effects. We do none of those three. We also honor Global Privacy Control by keeping optional analytics off. You can also appeal if we turn down a request (see below).
  • Canada: PIPEDA gives you the rights to access and correct your information, to withdraw consent, and to challenge how we comply with the law.

How to use your rights

If you have an account, you can download an export, sign out of every device, or close the account on the account page. These actions ask for your current password. The export leaves out passwords, recovery codes, hashes, session tokens, internal abuse records, other customers' information, and lab drafts saved only in your browser.

For anything else, email privacy@routeswitchu.com. Tell us what you want and which email address it's about. It's free.

We may need to confirm who you are first, usually by asking you to reply from the email address in question. Telling us an address, showing a receipt, or describing an account isn't enough on its own for us to hand over access to it.

We answer within 30 days. If the law where you live sets a shorter deadline, we meet that one. If a request is complex or we receive many at once, we may take longer where the law allows it: up to 2 more months under the GDPR and UK GDPR, 45 more days under the Colorado Privacy Act, or 30 more days under PIPEDA. If we need more time, we'll tell you why within the first 30 days.

Colorado appeals. If we turn down your request, you can appeal by replying to our answer with "Appeal" in the subject line. We'll answer within 45 days, or tell you within that time if we need up to 60 more days and why. If you're unhappy with the result, you can contact the Colorado Attorney General at coag.gov.

Complaints

If you're unhappy with how we've handled your information, tell us first at privacy@routeswitchu.com. We'll acknowledge your complaint within 30 days, look into it, and tell you what we found and what we did about it.

You can also complain to a regulator at any time:

  • In the EU, the data protection authority where you live or work, or where the problem happened. The European Data Protection Board lists them at edpb.europa.eu.
  • In the UK, the Information Commissioner's Office, at ico.org.uk.
  • In Canada, the Office of the Privacy Commissioner of Canada, at priv.gc.ca.
  • In Colorado, the Colorado Attorney General, at coag.gov.

Children

RouteSwitchU is built for working adults and isn't directed to children. You must be 16 or older to use the site, join the waitlist, or open an account, and 18 or older to buy. If you think a child has given us information, contact us and we'll delete it.

Security and changes

We use technical and operational safeguards designed for the information we keep, but no internet service can guarantee absolute security. When we change this policy, we update the date at the top of this page. If a change is material, such as a new use of your information, we'll also email account holders and waitlist members before it takes effect, and we'll ask for your consent first where the law requires it.

Contact

Privacy and data requests: privacy@routeswitchu.com. Mail: RouteSwitchU, 1580 N Logan St Ste 660 PMB 263873, Denver, Colorado 80203-1994, United States.

© 2026 RouteSwitchU · Updated Oct 24, 2026
Lab-first training for network engineers.
AboutContactSupportSite mapPrivacyTermsTerms of SaleWithdraw from contract hereAI DisclosureTrademarks
Cisco, CCNA, and Catalyst are trademarks of Cisco Systems, Inc. RouteSwitchU is an independent publisher and is not affiliated with Cisco. Full attribution.