Privacy policy

1. Controller

2. Overview

We process personal data only as needed to run k8s Decision Trainer (training progress, purchases, optional accounts). We do not send marketing newsletters or use advertising trackers.

3. Hosting

The site is hosted with a cloud provider (e.g. Vercel). Server logs may include IP address, timestamp, requested URL, and user agent. Legal basis: legitimate interest in reliable operation (Art. 6(1)(f) GDPR).

4. Account (optional)

• Data: email address, password (stored only as a cryptographic hash), training progress on our servers.
• Purpose: sign-in and syncing progress and purchases across devices.
• Legal basis: contract / pre-contractual steps (Art. 6(1)(b) GDPR).

5. PayPal payments

Payments are processed by PayPal. Data is shared with PayPal (Europe) S.à r.l. et Cie, S.C.A. (payment details, transaction IDs, invoice references). Legal basis: contract (Art. 6(1)(b) GDPR).

More information: PayPal privacy statement

6. Browser local storage

Training progress may be stored in your browser's localStorage, even without an account, until you clear site data.

7. Cookies

We use strictly necessary cookies:

• k8s_session — anonymous session for purchases and unlocks (up to 1 year).
• k8s_auth — authentication when you use an account.

Legal basis: contract / legitimate interest (Art. 6(1)(b)/(f) GDPR). No consent-based tracking cookies.

8. Retention

• Account and progress data: until you delete your account.
• Purchase records: as required by tax and commercial law.
• Server logs: typically a few weeks at the host.

9. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing. Contact us by email. You may lodge a complaint with a supervisory authority.

10. Changes

We update this policy when services or law change. Last updated: 8 June 2026.