Privacy Policy
Version 2.0 · Updated 12 September 2026
Privacy by feature
Account, learning, assessment and game-room data are kept in separate logical records so access can be limited to the feature and role that needs it. Learner-facing assessment responses never include answer keys or private administration fields.
Security
Passwords are stored as salted cryptographic hashes. Administrative routes check the ADMIN role on the server. Sessions are time-limited, sensitive responses are not cached and repeated authentication attempts are rate-limited.
Result email
A level-check result is sent only to the address entered for that attempt. Delivery status is recorded so an administrator can follow failed or queued delivery. The address is not added to a marketing list.
Changes and contact
Material changes will be published with a new version date. Privacy questions and Article 11 requests can be submitted on the KVKK page.