Privacy notice

Data controller

SymTech IT S.r.l., legal representative Ivo Simonic · info@symtech.it.

What we store about you

• Account: username, display name, email address, a bcrypt password hash (the password itself is never stored or visible, not even to us), account state, creation date.
• Proposals: the text you submit, your email (to tell you what happened), the terms version you accepted, timestamps and moderation state. Removed accounts are kept as a minimal tombstone (username, email hash, "blocked" state) solely to enforce the one-strike rule — nothing else.
• Technical logs: standard web-server access logs and authentication-failure logs (IP, username attempted). Used for security (rate limiting, fail2ban) and kept briefly.

What we do NOT do

No advertising, no third-party analytics, no trackers, no cookies beyond one essential session cookie (EDNSESS, HttpOnly, SameSite=Lax) that keeps you signed in — which is why there is no cookie banner. Your email is never published; only your display name (or username) appears next to an exercise, and only if you ticked the credit consent.

Where and who

Data live on SymTech IT servers in Slovenia (own infrastructure, Proxmox virtualised). Our AI assistant processes proposal text to research and build exercises; no personal data leave our infrastructure for that. Newsletter addresses (separate list) are used only to send new exercises, and one click unsubscribes permanently.

Retention and your rights

Account data: until you delete the account (self-service in the portal or by email) — then erased within 30 days; published exercises remain, credit removed on request. Blocked accounts: tombstone kept indefinitely as the terms require. You have the rights of access, rectification, erasure, portability, objection (Art. 15–21 GDPR) and may complain to the Slovenian Information Commissioner (or the Italian Garante, as your local authority).

Security measures

Hashed passwords (bcrypt), rate limiting, brute-force lockout, fail2ban, web-inaccessible data storage, HTTPS end-to-start-of-infrastructure. No system is perfect: if you believe you found a problem, write to info@symtech.it — responsibly, please.