What the hub remembers
A correct decision check stores a browser-reported pass on this device. The pass records the lesson id, the curriculum edition, the time, the source browser-decision-check, and the assurance browser-reported. The browser does not store the answer you picked. These passes live under security-atlas-field-record-v1. An older list of lesson ids in security-atlas-progress-v1 is read once as visited lessons. Visits do not award a milestone.
A milestone means every core lesson check in that path edition was reported passed. It is a private learning record. It does not grant a job qualification, a proficiency rating, or a verified exam result. You can retry a check, read the source, or edit what this browser stored. Electives are outside the requirement. Adding a required lesson later keeps a milestone you already earned for the earlier edition, and the newer edition stays open. A single-lesson path can earn a milestone when its one core check is passed.
A lab milestone requires every step to be correct. A walkthrough with a missed step stays progress only. Certification drill history stays in security-atlas-cert-progress-v1 and does not award a path milestone. Industry exercises stay personal bookmarks. Private browsing or blocked storage can prevent a pass from being saved. The correct result still stays on the page.
Optional account
You can create a sign-in link from the field record. The account stores the email address you enter, an account id, and the same browser-reported pass events. It does not store quiz answers, lab choices, or an analytics user id. Security Atlas does not email the link and does not keep the account on a server. The link carries the email address and the pass events. It expires in 30 minutes. Opening it on another browser copies the account onto that browser.
Sign out removes the session and this browser’s copy of the synced record, then leaves an empty anonymous record. The account remains on this browser until you delete it. Clear this device while signed out deletes only the anonymous record in this browser, including certification drill history stored here. Clear this device while signed in removes the local cache only. The account still holds the synced events, which return the next time you sign in.
Delete account removes the email, the account id, and the stored pass events, clears this browser, and signs you out. Deletion cannot be undone. Another tab that is signed in on this browser drops the record the next time it reads the account and signs out. A copy already opened on a different browser stays there until that browser deletes the account, because this site has no server copy to update.
If you clear this browser, keep learning anonymously, and sign in again, pass events combine by lesson id and edition. The account’s existing events stay. New local passes upload. A local reset does not delete the account. Awarded edition milestones are kept, and a newly completed edition is awarded from the combined passes.
The new Security Atlas address
Security Atlas now lives at atlasofsecurity.com. Browsers keep saved progress and analytics choices separate for each website. Previous progress on krisdjackson.com remains on that origin and is not automatically copied to this one. Security Atlas, the personal showcase, and games each keep their own analytics preference. Turning analytics off on one site does not change the preference on another.
Search and exercises
Search downloads a static index and matches text in your browser. Query text appears in your browser’s address bar and history; avoid searching for secrets or private incident details. The hosting cache does not need query strings to serve the page. Industry exercise answers, synthetic lab choices, and the Agentic SOC walkthrough remain in memory for the current page.
Placement test
The placement test does not ask for a name, an email address or an account. The test sends its data to a server that Atlas controls. This data includes each answer, the score for each question, the question and knowledge area, and the time spent on each question. Typed answers are cut to 200 characters. Web addresses, email addresses and phone numbers are removed from them. Other text, such as a name, is not removed. The data also includes the test mode and a device type (phone, tablet or desktop) based on screen width. It also includes the number of pastes and tab or app switches, the results for each area, and the question bank version.
The server makes a random id for each test. This id groups the records and is not linked to an account. Atlas does not store an IP address, browser details or cookies with this data. Atlas uses the data to set question difficulty and to check that the questions are fair. Each record is set to expire 90 days after it is saved. AWS then deletes it automatically, usually within a few days.
If the "Do not send data from this test to Atlas" box is ticked before the test starts, the test sends no test data to Atlas. This also applies when the test resumes. The box does not turn off analytics and does not delete data from an earlier test.
Hosting and network requests
Your browser connects to AWS infrastructure to retrieve pages and assets. Network services necessarily process details such as an IP address and request metadata to deliver and protect the site. This project does not enable CloudFront access logging, WAF request sampling, or advertising trackers. Operational service metrics can still count requests and failures.
Optional Google Analytics
When analytics is configured, Security Atlas, the personal project showcase, Cube Lab, and Ellis’ Game enable Google Analytics by default without an initial prompt. A previously saved opt-out is still respected. Use “Analytics preferences” and “Turn off analytics” to stop measurement for this app in this browser. While enabled, Google measures page visits, engagement, downloads, links between our apps, lesson and lab completions, generated cube solutions, and game starts. Google receives browser and device information and network metadata needed to process those requests. Analytics cookies distinguish repeat visits. We disable advertising personalization and Google signals.
Our events include predefined content identifiers and counts, not your search text, lab answers, cube inputs, or saved games. Page URLs exclude query strings and fragments; referrers include only the source origin. We do not set a user ID. See Google’s privacy policy for information about Google’s processing.
Use “Analytics preferences” in the site footer (or the floating control on apps without a footer link) to turn analytics off or back on. Turning it off stops further measurement and removes that app’s analytics cookies; it does not delete data already received by Google. Each subdomain stores its own choice under atlas-analytics-consent-v1. If local storage is blocked, an opt-out lasts only for the current page. Clearing site data clears this preference and restores the default of analytics on. Clearing hub progress alone does not.
Links to external sources open websites with their own policies. Cube Lab and Ellis’ Game use separate subdomains and may store their own local settings or saved games. Clearing hub progress does not erase those projects’ data.
Export and reset
The Fit Map example can export its synthetic inputs as a JSON file. The Agentic SOC and lab downloads contain public teaching data and source. Neither requires your name or email. To remove project-specific game or puzzle state, use that application’s controls or clear site data for its subdomain.
Updated October 19, 2026.