Controller and contact
TRK WEB DESIGN S.R.L. (CUI 46287403 · J16/1470/2022), Str. 1 Decembrie 1918 nr. 49, Bl. D23, Sc. 1, Ap. 19, Craiova, Dolj 200171, Romania, is the controller for TinkIT account and purchase data. Contact: support@tinkit.eu.
Data we use
We process your email address, account identifier, purchased kits, learning progress, XP, streaks and support messages. Our first-party analytics stores page paths, referring hostnames, coarse device classes and checkout starts without an analytics cookie, fingerprint, raw IP address or query string. When you are signed in, an event may be associated with your account. Stripe processes payment details on its hosted checkout; TinkIT does not receive your full card number.
If you choose to save a practice project, we also keep its name, brief and your milestone evidence in your account so you can resume it. Evidence may include a repository address or public website address. These are self-reported learning notes; we do not fetch those addresses or automatically verify your work. Keep credentials and other people's personal information out of these notes.
Unfinished project inputs may also be kept in memory and session storage in your current browser tab, separately for each account and author preview. These drafts help you return from a lesson without losing text. They are not confirmed account records or synced to another browser. The browser normally removes session storage when the tab closes. Use invented information and keep secrets out of drafts too.
We also keep your place within a lesson in session storage for the current tab, separately for each account and content version. It stores a section identifier and scroll offset to help you resume reading. It does not mark an exercise complete or sync to another device.
Why and on what basis
We use account, entitlement and progress data to perform our contract with you. We use limited security and first-party operational measurements for our legitimate interest in preventing abuse, understanding whether the service works and improving it. We use optional advertising or marketing storage only when the required consent exists.
Optional learning and marketing emails
With your separate permission, TinkIT may send learning tips, meaningful curriculum updates and reminders to return to an unfinished lesson. Buying access, accepting these terms or creating an account does not subscribe you. We record your choice, its date and the version of the consent wording. A confirmed account email is required to opt in.
These emails are limited to two optional messages in any 30 days. To make a return reminder relevant, we may use your selected learning path, saved unfinished lesson and the date of your last confirmed learning activity. We do not enable open or click tracking for these emails. This permission does not affect essential sign-in, security or purchase messages.
Automated reminders are spaced at least 14 days apart. After two return reminders, they pause until you open a lesson again. We keep a private record of permission and delivery attempts to honor withdrawals, prevent duplicates and enforce the shared limit across optional emails.
You may change your choice in Account. Every optional email includes an unsubscribe link that works without signing in. Choosing No or withdrawing permission does not change your account, purchased access or learning progress.
Providers and transfers
We use Supabase for accounts and database services, Stripe for checkout, Vercel for hosting and Resend for email delivery. If you choose optional emails, Resend may process your email address, message content and subscription or suppression preferences to deliver them and honor unsubscribe requests. A provider may process data outside your country under the safeguards it makes available for that service.
Retention
Account and entitlement records are retained while your access remains active and as required for tax, accounting, fraud prevention and legal claims. Support records are kept only as long as needed to resolve and document the request.
We keep your recorded email choice to honor it and document the permission you gave or withdrew. If optional messages are sent, we keep only the delivery and suppression records needed to respect your choice, prevent duplicate messages and enforce the frequency limit.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time. You may also complain to your local data protection authority.
Requests
Send a privacy request to support@tinkit.eu. We may need to verify that the email belongs to you before changing or disclosing account data.