Privacy Policy

Who We Are

Jraenllyd Tochorven operates an online education platform focused on VR game development for beginners. Our business is registered in Croatia, and we follow Croatian and European Union data protection laws—including GDPR requirements. You can reach us at Ul. Jakova Gotovca 18, 10360, Sesvete, Croatia.

What Information We Collect

We collect different types of information depending on how you interact with our platform. Here's what we gather and why:

Account Registration Data

When you sign up for our courses, we need basic details to create your account and provide access to educational materials:

• Full name (so we know who you are)
• Email address (for login and communication)
• Password (encrypted and stored securely)
• Country of residence (helps us understand our student base)
• Registration date and IP address (security purposes)

Learning Activity Information

As you progress through courses, we track certain activities to help you learn better and improve our content:

• Course enrollment records and completion status
• Quiz results and assignment submissions
• Time spent on lessons and modules
• Forum posts and community interactions
• Feedback and ratings you provide on course content

Technical and Usage Data

Like most websites, we automatically collect technical information when you visit our platform. This helps us fix bugs, prevent security issues, and understand how people actually use the site:

• Browser type and version
• Device information (desktop, mobile, VR headset specs if applicable)
• Operating system details
• Pages visited and navigation patterns
• Referral sources (how you found us)
• Session duration and interaction timestamps

Payment Information

If you purchase a course, we collect billing details through secure payment processors. We don't store full credit card numbers on our servers—that's handled by certified payment partners who meet strict security standards.

How We Use Your Information

We're not in the business of selling your data. Everything we collect serves specific purposes related to running our education platform:

We send transactional emails that you can't opt out of—things like password resets, enrollment confirmations, and important platform updates. Marketing emails are different. You decide whether you want those, and you can unsubscribe anytime.

Sharing Your Information

We don't sell student data to third parties. Period. But we do share information with specific service providers who help us run the platform:

Service Providers We Work With

• Cloud hosting services (where our platform lives)
• Payment processors (handling transactions securely)
• Email service providers (sending course materials and updates)
• Analytics tools (understanding how the platform gets used)
• Customer support software (managing help requests)

These providers only access data needed for their specific function, and they're bound by contracts to protect your information. We vet them carefully before partnering.

Legal Requirements

Sometimes we're legally required to share information—like responding to valid court orders or protecting someone's safety. We'll push back on overly broad requests and notify you when possible, unless we're legally prevented from doing so.

International Data Transfers

Our primary servers are located in the European Union, which means your data benefits from strong EU privacy protections. Some service providers we use operate globally, which might involve transferring data outside Croatia or the EU.

When that happens, we ensure appropriate safeguards are in place—like Standard Contractual Clauses approved by the European Commission. If you're concerned about where your data travels, contact us and we'll provide specific details about our current infrastructure.

Data Security Measures

We take security seriously because your trust matters. Here's what we do to protect your information:

• All data transmission uses TLS encryption (that's the padlock icon in your browser)
• Passwords are hashed using industry-standard algorithms—we can't see your actual password
• Regular security audits and vulnerability testing
• Access controls limiting who on our team can view personal data
• Automated backups with encryption
• Monitoring systems to detect suspicious activity

Your Privacy Rights

Under Croatian law and GDPR, you have substantial control over your personal data. These aren't just theoretical rights—we've built systems to actually honor them:

Access Your Data

You can request a complete copy of all personal information we hold about you. We'll provide it in a readable format within 30 days. No charge for the first request each year.

Correct Inaccurate Information

Spot something wrong in your profile? You can update most information directly through your account settings. For things you can't change yourself, email us and we'll fix it.

Delete Your Account

You can delete your account anytime through your settings. We'll remove your personal data within 30 days, though we might keep some information longer if required by law (like tax records for financial transactions).

Restrict Processing

In certain situations, you can ask us to limit how we use your data. For example, if you're disputing the accuracy of information, we'll restrict processing while we verify it.

Data Portability

Want to take your data to another platform? You can download your course progress, submissions, and profile information in common formats like JSON or CSV.

Object to Processing

If we're processing your data based on legitimate interest (like analytics), you can object. We'll stop unless we have compelling reasons to continue that override your interests.

Withdraw Consent

For anything requiring your consent (like marketing emails), you can withdraw it anytime. This won't affect processing that already happened before you withdrew consent.

To exercise any of these rights, email support@jraenllydtochorven.com with your request. We'll verify your identity and respond within 30 days.

How Long We Keep Your Data

We don't keep information longer than necessary. Here's our retention approach:

• Active accounts: Data is retained as long as your account exists and for 90 days after deletion to handle any disputes or recovery requests
• Course completion records: Kept for 7 years to provide certificates and transcripts upon request
• Payment records: Retained for 10 years to comply with Croatian tax and accounting regulations
• Support tickets: Kept for 3 years for quality assurance and legal protection
• Analytics data: Anonymized after 26 months and then kept indefinitely for historical analysis
• Marketing data: Deleted immediately if you unsubscribe, otherwise reviewed annually

After retention periods expire, we securely delete or anonymize the data so it can't be traced back to you.

Cookies and Tracking Technologies

Our platform uses cookies—small text files stored on your device. Some are essential for the site to work, others help us improve your experience.

Essential Cookies

These keep you logged in and remember your preferences. You can't disable them without breaking core functionality.

Analytics Cookies

We use these to understand how people navigate the platform and which features get used most. The data is aggregated and doesn't identify you personally.

Preference Cookies

These remember your settings—like video playback preferences or interface customizations.

You can manage cookie preferences through your browser settings. Just know that blocking certain cookies might limit functionality. We don't use advertising cookies because we don't run ads on our platform.

Children's Privacy

Our platform is designed for adult learners. We don't knowingly collect data from anyone under 16 without parental consent. If you're under 16 and want to take our courses, have a parent or guardian create the account and supervise your participation.

If we discover we've accidentally collected information from someone under 16 without proper consent, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally as our practices evolve or laws change. When we make significant changes, we'll email active users and post a notice on the platform at least 30 days before the changes take effect.

Minor updates (like clarifying existing practices or fixing typos) happen without notification. The "Last Updated" date at the top shows when we last modified this document.

Continuing to use our platform after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account before they go into effect.

Your Right to Complain

We hope to resolve any privacy concerns directly, but you have the right to file a complaint with Croatia's data protection authority:

You can also contact the data protection authority in any EU member state where you live or work.