Privacy & Cookie Policy

Who is responsible for your data?

The controller of personal data processed for this website is Krzysztof Kardasz. For privacy questions or to exercise your rights, email contact@sfcelearning.com.

Essential browser storage

We store your chosen theme, study progress and privacy choice in your browser's localStorage. This storage supports features you request and remembers whether you accepted or rejected analytics; it is not used for advertising. Theme and study progress stay on your device until you clear them. The privacy record (sfce:cookie-consent) contains your choice, its date, expiry and policy version. It is valid for 180 days, after which we ask again. An expired record may remain in browser storage until the site is used again or you clear it. These preferences are not sent to Google Analytics.

This storage is used under the strictly necessary exception in Article 399(3) of Poland's Electronic Communications Law. Where personal data is involved in operating and securing the website or remembering privacy choices, our legal basis is our legitimate interest in providing these functions (Article 6(1)(f) GDPR).

Optional Google Analytics

Only after you select “Accept analytics”, we load Google Analytics 4 (measurement ID G-TZSSJDCPGS) to measure visits, use of pages and engagement, and improve the study guide. The legal basis is your consent (Article 6(1)(a) GDPR and Article 399(1) of Poland's Electronic Communications Law). Before consent, or after rejection, we do not load the Google tag or send analytics requests, including cookieless measurement requests.

Google receives cookie identifiers, page views and interaction information, visit times, referring pages, and browser and device information. Your IP address is transmitted as part of the connection and may be used to derive an approximate location; Google states that GA4 does not log or store individual IP addresses. We do not send your study completion records, name or email address to Analytics. Google signals and advertising personalization are disabled by this site's tag; we do not use this integration for advertising or decisions with legal or similarly significant effects.

Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with processing by Google and its subprocessors. See Google's Privacy Policy and Google's GA4 data collection explanation.

Cookies and retention

These are first-party cookies. We configure their expiry to 180 days and disable automatic renewal on each page load. Browser restrictions may shorten their lifetime. They are removed by this website when you withdraw consent.

The GA4 property's retention period for user and event data is set to 2 months. User-identifier retention can restart on a new visit if the property's reset-on-new-activity setting is enabled. Aggregated standard reports are not subject to this same retention period and may remain available longer. Cookie lifetime and Google's data retention are separate. See Google's retention documentation.

Your choice and withdrawal of consent

“Reject analytics” is as accessible as “Accept analytics”. Closing the notice or continuing to browse does not grant consent. We remember either decision for 180 days in this browser only. You can reopen Cookie settings in the footer of any page and select “Reject analytics” to withdraw consent. This stops further collection, deletes this site's accessible Analytics cookies, and reloads the page to unload the tag. It does not erase data already sent to Google or affect the lawfulness of processing before withdrawal. Contact us to request erasure where applicable.

You can also delete cookies and localStorage in your browser. Removing the privacy choice means you will be asked again. If your browser cannot save a choice, it applies only to the current page. Rejecting analytics does not restrict access to study content or progress tracking.

Recipients, hosting and international transfers

The website is hosted on GitHub Pages. GitHub processes connection information, including IP addresses, to deliver and secure the site, independently of your analytics choice. See GitHub's Privacy Statement for its purposes, retention practices and transfer safeguards. We do not operate a separate server that receives your locally stored study progress.

Google and GitHub may process data outside the European Economic Area, including in the United States. Google describes its reliance on the EU–US Data Privacy Framework for covered transfers to certified recipients and on Standard Contractual Clauses where applicable in its international transfer information. Further details and copies of applicable safeguards can be requested from us or the providers.

Your data protection rights

Subject to the conditions in the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing, and portability of data processed by automated means on the basis of consent. You may object to processing based on legitimate interests and withdraw consent at any time. We may need information to locate the relevant analytics records, since we do not maintain user accounts. You may lodge a complaint with the President of Poland's Personal Data Protection Office (UODO) or your local supervisory authority.

External links and contact

Linked websites, including Symfony and PHP documentation, have their own privacy practices. If you email us, we use your email address and message to answer your request, based on our legitimate interest in handling correspondence (Article 6(1)(f) GDPR), or a legal obligation where your message concerns a statutory rights request (Article 6(1)(c) GDPR). We keep correspondence for the time needed to resolve the matter and meet applicable legal obligations or establish, exercise or defend legal claims.

Changes to this policy

We update the date above when this policy changes and request fresh consent if the purposes or scope of analytics materially change. The website's source code is available in our GitHub repository.