Security and updates: in plain words

Why Windows may warn you

Large companies buy a commercial "code-signing certificate" so Windows recognises their programs. CourseForge does not have one yet. So when you install it, Windows SmartScreen may show "Windows protected your PC". This means "Windows doesn't know this publisher yet", not "this is harmful". To continue, click More info, check the file name is CourseForge-Setup, then click Run anyway.

Only download CourseForge from vsbflabs.in. If in doubt, contact us before installing.

How updates are protected

• Every CourseForge release is signed with our private update key, which is kept off our web server.
• CourseForge has the matching public key built in. It installs an update only if the signature is valid, the version is newer, the download comes from vsbflabs.in over an encrypted connection, and the file's size and fingerprint (SHA-256) match exactly.
• So even if our website were ever compromised, it could not push a fake update to your computer.
• Updates are offered, never forced: you choose when to install.

What CourseForge sends over the internet

• To start the trial or activate: your licence key and an anonymous computer fingerprint (a one-way code, not your name or files).
• To check for updates: your signed licence token.
• When you create a review link: the published course you chose to share.
• Model downloads (voices, images, video encoder) from Hugging Face and GitHub, when you install them.
• Only if you switch it on: image descriptions to the Pollinations online service.

Narration and images are otherwise made on your computer; your courses stay with you. See our privacy policy.