Privacy Policy

APP 1 — Open and transparent management of personal information

This document is the policy required by that principle, it is linked from the footer of every page on the site, and it is written to be read rather than filed. The site is deliberately built so that there is very little to manage: it is static HTML, CSS and a short first-party script, with no database, no forms and no accounts. Questions about this policy go to info@blankcipher.online.

APP 2 — Anonymity and pseudonymity

You can read every page of this course without identifying yourself. There is no sign-in and nothing to fill in. If you email us, a pseudonymous address is perfectly acceptable, and we will answer it. The one exception is a request for access to or correction of information we hold: for those we need enough information to be confident we are dealing with the right person, which usually means writing from the address the correspondence was sent from.

APP 3 — Collection of solicited personal information

Two categories exist, and that is the whole list.

(a) Server access logs. Our hosting provider records ordinary web server logs for each request: the IP address the request came from, the date and time, the URL requested, the referring page if your browser sends one, and the user-agent string identifying the browser and operating system.

(b) The content of emails sent to info@blankcipher.online. That means the sending address, any name given, the message itself and any attachments.

Nothing else is collected. There are no forms of any kind, no accounts, no newsletter, no progress tracking across the checklists, no cookies, no web fonts, no analytics, no advertising tags, no profiling and no cross-site tracking. The pages make no request to any other server: every stylesheet, script and graphic is served from this domain, and the illustrations are inline SVG and CSS rather than image files.

APP 4 — Dealing with unsolicited personal information

If someone sends us information by email that we did not ask for and do not need in order to reply — details about other people, account credentials, payment details, identity documents — we delete it as soon as it is lawful and reasonable to do so, and we do not use or disclose it in the meantime.

APP 5 — Notification of the collection of personal information

This section is that notification. At the point of collection: logs are created automatically when you request a page, and email content is collected when you choose to write to us. Both are described above, along with the purposes below, and both are collected by GALLARDO TRADE s.r.o., whose contact details are at the top and bottom of this page.

APP 6 — Use or disclosure of personal information

Each category is used only for the purpose it was collected for.

Logs are retained for 30 days and then deleted. Email is retained for 24 months after the last message in the conversation, unless it is needed in connection with a legal claim, in which case it is kept until that matter is finished.

We never sell, rent or trade personal information, and we never share it for anyone's marketing purposes. We disclose it to an authority only where the law requires us to.

APP 7 — Direct marketing

We do none. There is no mailing list, no newsletter, no promotional email and no reminder to finish the course, because we have no way of knowing whether you have started it and no address to send anything to unless you write to us first. If you do write to us, your address is used to answer you and for nothing else.

APP 8 — Cross-border disclosure of personal information

Two providers are involved in running this site: our hosting provider, which serves the pages and keeps the access logs, and our email service provider, which carries messages to and from info@blankcipher.online. Both may store or process data at locations outside Australia. We are not naming a country here because doing so accurately for every part of the service is not something we can guarantee over time; what we can tell you plainly is that you should assume the handling of logs and email may take place outside Australia.

The publisher itself, GALLARDO TRADE s.r.o., is established in the Czech Republic, so correspondence sent to us is read there.

APP 9 — Adoption, use or disclosure of government related identifiers

This principle has no application here. We do not adopt, use or disclose any government related identifier. We never ask for one, and if one arrives in an email it is treated as unsolicited information under APP 4 above.

APP 10 — Quality of personal information

The only information we hold that could be inaccurate is something you told us in an email. If anything we hold about you is wrong, tell us and we will correct it. We do not build profiles, infer anything about readers, or enrich what we hold from any outside source.

APP 11 — Security of personal information

The site is served over HTTPS. There is no database and no store of submitted information, because nothing is submitted: the only places personal information exists are the hosting account's log files and the mailbox. Both are reachable only by people working for GALLARDO TRADE s.r.o., using individual credentials. Information is deleted at the end of the retention periods above. We do not claim any certification or compliance standard, because we hold none.

APP 12 — Access to personal information

You may ask what we hold about you. Email info@blankcipher.online with Privacy request in the subject line. There is no charge for making a request, and we will reply within 30 days. In practice, for a reader who has never written to us, the answer is that the only trace is a log entry that has very likely already been deleted; if you have corresponded with us, the answer is that correspondence.

APP 13 — Correction of personal information

The same route corrects it. Use the same subject line, tell us what is wrong and what it should say, and we will correct it and confirm within the same 30 days. If we disagree that something should be changed, we will tell you why in writing and note your view alongside the record.

When you open a paid affiliate link on this site, you leave blankcipher.online. From that moment, the Crossout website and the affiliate network that operates the link may set cookies or use similar technology on their own domains to record that the referral came from us, under their own privacy notices rather than this one.

GALLARDO TRADE s.r.o. receives commission reports from that network. Those reports are used only to reconcile payments. We do not seek, and have no interest in obtaining, information that identifies individual readers, and we do not attempt to connect any report to any visit to this site.

If you think we have mishandled personal information, write to info@blankcipher.online and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which explains the process at oaic.gov.au/privacy/privacy-complaints.

If we become aware of unauthorised access to, disclosure of, or loss of personal information connected with this site, we assess it promptly. Where serious harm to anyone is likely, we notify the affected people and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme.

This site is written for adults and is not directed at people under 16. We collect nothing that would identify a reader of any age, and we have no mechanism that could treat a younger reader differently, because there is nothing to sign up to.

GALLARDO TRADE s.r.o. is established in the Czech Republic, so European data protection law is also relevant to how we handle the two categories above.

The legal basis for keeping server access logs is our legitimate interest in the security and sound operation of the site. The legal basis for handling email is taking steps at your request and responding to your enquiry. There is no consent basis anywhere on this site, because there are no cookies and no tracking to consent to.

Where that law applies to you, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, exercised through the same address: info@blankcipher.online. You may also lodge a complaint with a supervisory authority. Ours is the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů), uoou.gov.cz.

When this policy is revised, the effective date at the top is updated. Where a change is material — a new category of information, a new recipient, a different retention period — we also place a short note at the top of this page for 30 days saying what changed.

GALLARDO TRADE s.r.o.
Rybná 716/24, Staré Město, 110 00 Praha 1, Czech Republic
Company registration: 03544371
info@blankcipher.online

The Cookie Policy covers cookies and similar technologies in more detail, and agrees with this policy: there are none on this site.