SkillCoded can be used without an account and without optional analytics. This notice explains the limited personal data used for optional accounts, saved progress, service improvement, security, support, consent-gated Google Analytics, and any Google advertising that may be activated after site approval.
Data, purposes, and legal bases
- Optional account and saved progress: a private username, password and recovery-code hashes, sessions, quiz attempts, answers, scores, and duration. These provide and secure the features you request under Article 6(1)(b) GDPR. SkillCoded does not request an account email address or store readable passwords or recovery codes.
- Service improvement: signed-in lesson events, optional ratings, lesson suggestions, and cookie-free daily page totals. These help operate and improve the service under Article 6(1)(f) GDPR. The aggregate page counter creates no browser or account identifier and stores no IP address or complete referrer.
- Optional Google Analytics: only after you accept, Google Analytics measures sessions, traffic sources, sanitized public-page navigation, and allowlisted learning actions. It may receive a pseudonymous browser identifier, session state, sanitized page paths, public lesson/category slugs, approximate location, and browser/device information. The legal basis is your consent under Article 6(1)(a) GDPR. SkillCoded does not send usernames, email addresses, account or attempt identifiers, answers, scores, free text, URL queries or fragments, or
user_id. - Optional Google advertising: if advertising is activated, Google and participating third-party vendors may process cookie or similar identifiers, IP address, browser/device information, page context, and ad impression or interaction data to select, deliver, secure, limit, and measure ads. Personalized advertising is permitted only after the choices required by the Google-certified consent platform. The applicable legal basis is consent under Article 6(1)(a) GDPR where required.
- Support and lesson suggestions: messages and structured details you choose to send are used to answer or evaluate your request under Article 6(1)(b) or 6(1)(f) GDPR, as applicable.
- Security and legal requests: limited session, timestamp, network, security-event, request, and correspondence data are used to prevent abuse, respond to incidents, and meet legal duties under Article 6(1)(f) or 6(1)(c) GDPR.
A username and password are required only if you choose to create an account. Suggestion and support fields are required only when you choose to use those features.
Cookies and similar storage
Signed-in accounts use one essential secure session cookie. A first-party preference cookie remembers your optional-analytics choice for 180 days. If you accept analytics, Google Analytics may set _ga cookies for no more than 60 days from first set, without renewal on later page loads. Before analytics acceptance and after analytics rejection, no Google Analytics tag, cookie, or measurement request is created. If advertising is activated, Google's certified consent platform and advertising services may use cookies, web beacons, IP addresses, or other identifiers according to the choices shown to you. See the Cookie Notice.
Advertising
Current status: Google advertising requests are currently disabled.
When active, advertisements are labelled and kept away from test controls. A test never requires viewing or clicking an ad. Google and its partners may use advertising cookies to serve ads based on visits to SkillCoded or other websites, subject to your consent choices. You can review or opt out of personalized advertising in Google Ads Settings. See how Google uses data from partner sites.
Recipients and international transfers
- Hosting: Hetzner Online GmbH, with the application hosted in Falkenstein, Germany (European Union).
- Support email: only if you choose to contact the published support address, the mailbox providers involved process your message and delivery information.
- Optional analytics: only after you accept, limited measurement data is sent to Google Analytics. Google states that EU IP addresses are discarded before logging after being used for routing and approximate geolocation.
- Optional advertising: only if activated after approval, Google and the vendors listed by its certified consent platform receive the limited data needed to serve, secure, and measure ads according to your choices.
Google and mailbox providers may process information outside the EEA. Google states that it uses adequacy decisions, the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses where applicable. SkillCoded does not use Google Analytics for advertising or remarketing, does not sell personal data, and discloses information only to the providers above or where required by law.
Retention
- Account data and private learning history are kept while the account remains open. Sessions expire no later than 24 hours after sign-in. Pending suggestions are kept while they are reviewed.
- Application logs rotate under fixed limits. Incident or legal-claim records are ordinarily kept no longer than 12 months. Rolling backups are kept for 7 days.
- The analytics preference expires after 180 days and Google Analytics cookies after no more than 60 days from first set. GA4 user-level and event-level data is configured for two months with retention reset disabled. This setting does not cover standard aggregated reports.
Your choices and rights
You can reject optional analytics without losing any feature. Reopen Privacy and cookie settings in the footer to change your choice. Withdrawal stops future Google Analytics collection and removes the known Google cookies available to SkillCoded, but does not undo earlier processing.
You may request access, correction, deletion, portability, restriction, or object to processing based on legitimate interests. Contact skillcodedadmin@gmail.com. We may verify the request proportionately and normally respond within one month. You may also complain to Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), Romania.
Changes
Material changes receive a new effective date and appropriate notice.
Data controller: Daniel Chiru
Contact: skillcodedadmin@gmail.com