Privacy policy
Last updated: 1 Oct 2026
1. Controller
[Company name, registered address and contact details of the data controller to be completed.] For privacy questions contact [privacy email].
2. Data we collect
Account data (email, name, language, password stored as a secure hash), confirmation of age and acceptance of terms, profile settings (default bankroll, risk profile), the simulations and inputs you save, lesson progress, subscription status from our payment provider, and technical logs (e.g. IP address at login) for security.
3. Purposes and legal bases
Providing the service and your account (performance of contract, Art. 6(1)(b) GDPR); security and abuse prevention (legitimate interest, Art. 6(1)(f)); billing and accounting (legal obligation, Art. 6(1)(c)); responsible-gaming tools such as self-exclusion (legitimate interest and your request).
4. Cookies
We use one strictly necessary cookie (access_token) to keep you logged in. We do not use advertising cookies. [Update if analytics are added.]
5. Processors
Hosting provider, email delivery provider and payment provider (e.g. Stripe), each under a data-processing agreement. [List and transfer safeguards to be completed.]
6. Retention
Account data is kept while your account is active. When you delete your account, your profile, simulations and progress are deleted immediately; limited audit records may be retained for security and legal purposes. [Retention periods to be completed.]
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. You can export your data and delete your account at any time from your profile. You may lodge a complaint with your supervisory authority (in Greece, the Hellenic Data Protection Authority).
8. Children
The service is for adults only. We do not knowingly collect data from persons under 18.