Legal
Privacy Policy
This policy explains what personal data Anomaly INS processes when you use this website, why, on what legal basis, who else takes part, how long it is kept and what you can do about it. It covers the website, your account, the video library, the assistant and the market chart.
Who is responsible
The controller of your personal data is the operator of this website:
- Operator
- To be completed before launch
- Address
- To be completed before launch
- Tax ID
- To be completed before launch
- To be completed before launch
For anything about your data, write to the email address above.
What we process and why
Your account
When you create an account we process your email address and, if you choose one, your password, which is stored only as a salted hash by our authentication provider and is never readable by us. If you sign in with Google, Apple, Facebook, Microsoft, X, Discord, GitHub or LinkedIn, we receive from that provider the email address and the identifier it gives us for your account, and, depending on the provider, your name and profile picture address. We use this to create your account, sign you in and keep it secure.
Legal basis: performance of the contract you enter into by creating an account (Article 6(1)(b) GDPR).
Your subscription
If you buy access, the payment is handled by Stripe. Card details go directly to Stripe and never reach us. We keep the status of your subscription, the date it renews or ends, whether it is set to end, the price you chose and the identifiers Stripe gives us for you and your subscription.
Legal basis: performance of the contract (Article 6(1)(b)) and our legal obligations under tax and accounting law (Article 6(1)(c)).
Watching lessons
To play a lesson we issue a short-lived signed token after checking your subscription. The video is delivered by Cloudflare Stream, which processes your IP address and device information in order to stream it to you.
Legal basis: performance of the contract (Article 6(1)(b)).
The assistant
When you ask the assistant a question, the question and the recent turns of the conversation are sent to our server and passed to Groq, Inc., which generates the answer. We do not store your conversations. Your IP address is used briefly, in memory, to limit the number of questions per visitor. Please do not type personal information into the assistant.
Legal basis: our legitimate interest in offering the assistant and protecting it from abuse (Article 6(1)(f)).
Prices in other currencies
If prices are shown in a currency other than the one you are charged in, your browser fetches European Central Bank exchange rates from api.frankfurter.dev. That request, like any request on the internet, reveals your IP address to that service.
Legal basis: our legitimate interest in showing you an approximate price in your currency (Article 6(1)(f)).
The market chart
The chart is provided by TradingView. It loads only after you allow it. When it loads, TradingView sets its own cookies and processes usage data under its own privacy policy, as an independent controller.
Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time under “Cookie settings” at the bottom of every page.
Running the website
Our hosting provider processes your IP address, browser details and the addresses you request, in order to deliver the website and protect it against attacks.
Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)).
What is stored on your device
The website keeps your sign-in and a few of your choices in your browser’s storage. None of it is used for advertising or analytics. The full list, with what each item is for and how long it stays, is in the Cookie Policy.
Who else takes part
We use these service providers. Those marked as processors act only on our instructions under a data processing agreement.
- Supabase — accounts and database; processor; data hosted in the European Union.
- Netlify — website hosting and server functions; processor.
- Cloudflare — lesson video delivery; processor.
- Stripe — payments; independent controller for payment data.
- Groq — generating the assistant’s answers; processor.
- Our email provider — sending sign-in, confirmation and password emails; processor.
- TradingView — the market chart, only after your consent; independent controller.
- Google, Apple, Facebook (Meta), Microsoft, X, Discord, GitHub, LinkedIn — only if you choose to sign in with them; each is an independent controller for your account with them.
We do not sell your data and we do not share it for advertising.
Transfers outside the European Economic Area
Some of these providers are based in the United States or may process data there. Such transfers rely on the EU–US Data Privacy Framework where the recipient takes part in it, and otherwise on the European Commission’s standard contractual clauses.
How long we keep it
- Account data: for as long as your account exists. After you ask us to delete your account, we delete it within 30 days.
- Billing records: for as long as tax and accounting law requires — in Poland generally five years from the end of the year in which the payment was made.
- Assistant questions: not stored by us.
- Hosting logs: for a short period, for security, according to our host’s retention.
Your rights
You have the right to access your data, to have it corrected, to have it deleted, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interest, and to withdraw consent at any time without affecting what happened before. To use any of these rights, write to the email address above. We answer within one month.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl.
Deleting your account
Delete it yourself on the Account tab with “Delete account”. You can also write to the email address above from the address your account uses. If you have an active subscription, cancel it first under Account → Manage billing, so that you are not charged again.
Is providing data required?
Browsing the website does not require an account. To create one, an email address is required; without it we cannot provide the account or the video library.
Changes
If we change how we process your data, we will update this page and the date at the top. If the change matters for your account, we will also tell you by email before it takes effect.