Privacy Policy

Last updated: May 19, 2026

1. Controller

2. Data We Collect

Account data: email address, name, and password hash when you register.
Usage data: simulation inputs, results, session logs, and feature usage.
Payment data: processed exclusively by Stripe. We do not store card numbers.
Technical data: IP address, browser type, device identifiers, cookies.

3. How We Use Your Data

Provide and improve the Sindbet simulation service
Process payments and manage subscriptions
Send transactional emails (receipts, account alerts)
Prevent fraud and ensure platform security
Comply with legal obligations

4. Legal Basis (GDPR)

We process data based on: contract performance (to provide the service), legitimate interest (security, analytics), and consent where required by law.

5. Data Sharing

We share data only with trusted processors: Stripe (payments), infrastructure providers (hosting), and analytics tools. We never sell your data.

6. Data Retention

Account data is retained while your account is active and deleted within 30 days of account closure, unless legal obligations require longer retention.

7. Your Rights

Under GDPR you have the right to access, correct, delete, restrict processing, and port your data. Contact [email protected] to exercise these rights.

8. Cookies

We use essential session cookies and optional analytics cookies. You can disable non-essential cookies in your browser settings.

9. Security

We use TLS encryption, hashed passwords, and access controls. No system is 100% secure; we notify you of breaches as required by law.

10. Contact

Privacy questions: [email protected]