Privacy Policy / Politique de Confidentialité

1. Data Controller / Responsable du Traitement

Controller: EREZ Dev (individual operator, non-commercial community project)
Country: Israel
Contact email: warthunder.bizon@proton.me

We do not publish a residential address. All privacy inquiries and GDPR requests should be sent to the email above.

1.1 EU Representative (Article 27 GDPR)

We provide this service to users located in the European Union. At this time, we have not appointed an EU representative under Article 27 GDPR.

If you are a supervisory authority or an EU-based user and need an EU point of contact, please email us and we will provide a response and updates on our appointment process.

2. Data We Collect / Données Collectées

2.1 Account Information

• Email address: Required for account creation and login
• Password: Stored in encrypted (hashed) form
• Display name: Optional, for personalization
• Discord username: Optional, for community features

2.2 Learning Progress

• Course completion status
• Lesson progress and quiz scores
• Experience points (XP) and level
• Code submissions for practice exercises

2.3 Technical Data

• Authentication tokens (session cookies)
• Server logs (IP addresses anonymized after 30 days)

3. Purpose and Legal Basis / Finalité et Base Légale

4. Data Retention / Conservation des Données

• Account data: Retained until account deletion
• Learning progress: Retained until account deletion
• Server logs: 30 days (IP addresses anonymized)
• Authentication cookies: 2 hours (session), max 7 days (remember me)

5. Data Sharing / Partage des Données

We do not sell your personal data.

We share personal data only when necessary to operate the platform:

• Hosting provider (processor): AdminVPS (France, EU) — infrastructure hosting, storage, backups, and network security operations.

We may disclose personal data if required by applicable law, a binding legal request, or a court order.

6. International Data Transfers / Transferts Internationaux

Your personal data is stored and processed exclusively on servers located in France (European Union). We do not transfer your personal data outside the European Economic Area (EEA).

Although the data controller is established in Israel (a country recognized by the European Commission as providing an adequate level of data protection under Decision 2011/61/EU), all data processing operations occur within the EU. Administrative access from Israel is limited to platform management and is protected by encrypted connections.

7. Automated Decision-Making / Décisions Automatisées

We do not engage in automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you, as described in Article 22 of the GDPR.

Automated features on this platform (such as quiz scoring, progress tracking, and XP calculation) are used solely to provide educational feedback and do not result in decisions that have legal or other significant consequences for you.

8. Your Rights / Vos Droits

Under GDPR, you have the following rights:

• Access (Art. 15): Request a copy of your personal data
• Rectification (Art. 16): Correct inaccurate data (via your profile)
• Erasure (Art. 17): Request deletion of your account and data
• Restriction (Art. 18): Request restriction of processing in certain circumstances
• Portability (Art. 20): Receive your data in a structured, commonly-used, machine-readable format
• Objection (Art. 21): Object to processing based on legitimate interest
• Withdrawal (Art. 7): Withdraw consent at any time (for consent-based processing), without affecting the lawfulness of processing prior to withdrawal

To exercise these rights, contact us at warthunder.bizon@proton.me. We will respond within 30 days of receiving your request. If we require an extension (up to an additional 60 days for complex requests), we will inform you within the initial 30-day period.

9. Cookies

This platform uses only essential cookies required for authentication. These cookies are strictly necessary to provide the login/session functionality requested by you. Without them, the platform cannot operate.

If we add analytics or marketing cookies in the future, we will request your consent before setting them.

10. Data Security / Sécurité des Données

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, including:

• Password hashing using industry-standard algorithms (bcrypt)
• TLS/HTTPS encryption for all data in transit
• Role-based access control limiting data access to authorized personnel
• Rate limiting and protection against brute-force attacks
• Regular security updates and monitoring

11. Children's Privacy / Données des Mineurs

This platform is intended for users aged 15 years or older. We do not knowingly collect personal data from children under the age of 15 without verifiable parental consent. If we become aware that we have collected personal data from a child under 15 without appropriate consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at warthunder.bizon@proton.me.

12. Filing a Complaint / Déposer une Réclamation

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

You may also contact the French supervisory authority (CNIL): https://www.cnil.fr/

13. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notification. Continued use of the platform after changes constitutes acceptance.