Privacy Policy

The short version

This site knows your email address, whether you have paid for a course, and when you last signed in. It has no analytics, no advertising, no tracking pixels and no third-party scripts watching you read. Nothing about you is sold, rented or shared for marketing, by anyone, ever.

Who is responsible

The data controller is Andrei Barbu PFA, a sole trader registered in Romania. Write to andreidotbarbu@gmail.com about anything on this page, including a request to see or delete what is held about you.

What is collected, and why

• Your email address and password. Needed to have an account at all. The password is stored only as a cryptographic hash by our authentication provider — it cannot be read back, by us or by anyone else. Legal basis: performing the contract you entered into.
• Sign-in timestamps and the fact that your email is confirmed. Used to keep the account working and to notice abuse. Legal basis: our legitimate interest in a service that is not trivially broken into.
• Which courses your account may open. One row per purchase, holding your account id, the course, and the date. Legal basis: performing the contract.
• Anything you write to us. Emails you send are kept while they are useful for supporting you. Legal basis: legitimate interest in answering you.
• Ordinary server logs kept briefly by our hosting provider, which include IP addresses. Legal basis: legitimate interest in security and in the site staying up.

There is no profiling and no automated decision-making. Nothing here is used to build a picture of you beyond running the service you asked for.

Payment data, which we deliberately do not have

Courses are sold by Lemon Squeezy as merchant of record. Your name, billing address, card details and tax status are given to them, not to us, and are handled under their privacy policy. What comes back to this site is that an order was paid and which account it belongs to. No card number ever touches this server.

Who processes data on our behalf

• Supabase — the database and the authentication that holds your account and your course access.
• Cloudflare — hosting, and the video platform that delivers lesson recordings. Video is served through short-lived signed links tied to your session.
• Lemon Squeezy — payment, invoicing and tax, as described above.

Each is bound to process data only on our instructions. Some of them operate outside the European Economic Area; where they do, transfers rely on the European Commission's standard contractual clauses or an equivalent safeguard.

How long it is kept

Your account and its course access are kept while the account exists, because deleting them would delete what you paid for. Ask us to close the account and both go, normally within thirty days. Records that tax law requires the seller to keep are held by Lemon Squeezy under their own retention rules, and we cannot delete those on your behalf.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected or erased, ask for processing to be restricted, object to processing based on legitimate interest, and ask for your data in a portable form. Write to the address above; we answer within one month.

If the answer does not satisfy you, you may complain to the Romanian supervisory authority, the Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal, at dataprotection.ro, or to the authority in your own EU country.

Cookies

Only the ones that keep you signed in. There is no consent banner on this site because there is nothing to consent to — the detail is in the Cookie Policy.

Children

This site is aimed at working network engineers and is not directed at children. We do not knowingly hold data about anyone under 16.

Changes

If this policy changes, the date at the top changes with it, and anything material will be announced on the site rather than slipped in quietly.