Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter "Policy") describes what personal data is collected and processed by the online school Skillaria.Top (hereinafter "Operator", "we"), available at https://skillaria.top, for what purposes and on what legal grounds, and what rights users have regarding their data.

This Policy is developed in accordance with:

• Federal Law No. 152-FZ "On Personal Data" (Russia);
• EU Regulation 2016/679 (GDPR) — for users from the European Union.

2. Data We Collect

Category	Examples	Purpose
Registration data	Name, email, username, password hash	Account creation, authentication
Payment data	Amount, payment identifier (payment processor), applied promo codes	Subscription purchase and renewal
Learning data	Viewing progress, completed lessons, test and interview answers, questions to the AI tutor and mentor	Progress tracking, answer review, certificate issuance
Notification data	Email, interface language, notification settings; if allowed in the browser — the device push subscription address and keys; delivery log (date, channel, opened)	Service notifications, learning reminders, platform news (section 5)
Technical data	IP address, browser, UTM tags, session cookies	Security, analytics, service improvement
Guest data	Cookie identifier (_skid)	Anonymous analytics before registration

We do not collect special categories of data (health information, political views, biometrics, etc.).

3. Legal Bases for Processing

• Contract performance — processing data necessary to provide access to courses, and service notifications (payment, subscription expiry, review results) (Art. 6(1)(b) GDPR).
• Consent to personal data processing — a separate document you confirm at registration (consent text).
• Consent — analytics cookies; push notifications (the permission you grant in your browser); learning reminders and platform news by email. You may withdraw consent at any time (section 5).
• Legitimate interest — ensuring security, protection against fraud.
• Legal obligation — storing documents in accordance with applicable law.

4. Cookies

We use the following types of cookies:

Name	Type	Retention	Purpose
edu_session	Essential	30 days	Authenticated user session
edu_remember	Essential	1 year	Keeps you signed in
lang	Functional	1 year	Selected interface language
_skid	Analytics	1 year	Anonymous guest identifier for analytics
cookie_consent	Functional	1 year	Saves your cookie preference

You can manage cookies through your browser settings. Disabling essential cookies may affect the functionality of the site.

Besides cookies, the site keeps service flags in your browser's local storage (localStorage), such as when you postponed the offer to enable notifications or install the app. This data is not sent to the server.

5. Notifications and Emails

We send registered users the following kinds of notifications:

• Subscription and payment — payment confirmation, failed payment, subscription expiring soon;
• My results — AI interview reviewed, mentor reply, new level, course completed;
• Learning reminders — if you registered but have not started learning, or have not visited for a while (about 3, 7 and 21 days), with a link to your next lecture;
• Activity — learning streak at risk, leaderboard position changes (leaderboard participants only), weekly summary;
• News — new lectures in courses you are taking; new course announcements and offers (marketing) are emailed only with separate marketing consent, given at registration or in your profile and withdrawable there.

Channels. If you allowed push notifications in your browser or the installed app, the notification is delivered there; otherwise by email. Duplicate notifications are suppressed, and each reminder stage is sent at most once.

How to opt out. Each notification group can be turned off in your profile ("Notifications"). Every email contains an "Unsubscribe" link that turns off the corresponding group without signing in. Push notifications can be turned off in the profile or in your browser settings; invalid push subscriptions are deleted automatically. Service notifications about payments and the subscription relate to contract performance but can also be turned off.

Notification content is generated automatically from your learning data. To measure effectiveness, we store whether a notification was sent and opened.

6. Data Sharing with Third Parties

We do not sell or share your data with third parties, except:

• Payment processors — to process payments;
• Hosting provider — to operate site infrastructure and send emails;
• AI providers (OpenAI-compatible services such as OpenRouter, Ollama) — to run the AI tutor, review interviews and translate materials. Only the texts of questions and answers are sent, without your name or email; explicit contact details (email, phone, card number) are masked automatically before sending. Users undertake not to include personal data in these texts (section 10 of the Terms). The provider may be located outside your country;
• Browser push services (Google, Mozilla, Apple, Microsoft) — deliver push notifications to your device; notification content is transmitted encrypted;
• Government authorities — as required by law.

7. Data Retention

• Account data — until account deletion or 3 years after last activity;
• Payment records — 5 years (tax law requirements);
• Guest sessions — 90 days;
• Push subscriptions — until you turn off notifications, sign out on the device, or the browser stops accepting deliveries;
• Notification log and applied promo codes — until account deletion;
• Event logs — 90 days for guests, no auto-deletion for registered users.

8. Your Rights

You have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• restrict or object to processing;
• receive your data in a machine-readable format (data portability, GDPR);
• withdraw consent to processing at any time.

To exercise your rights, contact us by email: info@skillaria.top. We will respond within 30 days.

EU users also have the right to lodge a complaint with the data protection supervisory authority in their country.

9. Security

We apply technical and organizational security measures: password storage as hashes, HTTPS, restricted database access. However, no system can guarantee absolute security of data transmission over the internet.

10. Children's Data

This site is not intended for persons under 18 years of age. If you become aware that a child has provided us with their data without parental consent, please contact us.

11. Policy Changes

We may update this Policy. We will notify you of significant changes by email or through a site notification. The date of the last update is indicated at the top of this document.

12. Contact

Онлайн-школа Skillaria.Top
Website: https://skillaria.top
Email: info@skillaria.top